# changelog

author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.14.0.7-2
changelog:
  - Update to jdk-17.0.14+7 (GA)
  - Add to .gitignore openjdk-17.0.14+7.tar.xz
  - Set buildver to 7
  - Set is_ga to 1
  - Update sources to openjdk-17.0.14+7.tar.xz
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - Resolves: RHEL-73981
  - Resolves: RHEL-73559
  - ** This tarball is embargoed until 2025-01-21 @ 1pm PT. **


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.15.0.6-2
changelog:
  - Update to jdk-17.0.15+6 (GA)
  - Add to .gitignore openjdk-17.0.15+6.tar.xz
  - Set updatever to 15
  - Set buildver to 6
  - Update sources to openjdk-17.0.15+6.tar.xz
  - Set bundled freetype provide version to 2.13.2
  - Set bundled harfbuzz provide version to 8.2.2
  - Require tzdata-java 2025a at runtime and for build
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - Update FIPS patch
  - Resolves: RHEL-86627
  - ** This tarball is embargoed until 2025-04-15 @ 1pm PT. **


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.16.0.8-2
changelog:
  - Update to jdk-17.0.16+8
  - Add to .gitignore openjdk-17.0.16+8.tar.xz
  - Set updatever to 16
  - Set buildver to 8
  - Set rpmrelease to 2
  - Update sources to openjdk-17.0.16+8.tar.xz
  - Resolves: RHEL-101788
  - Resolves: RHEL-101795
  - Resolves: RHEL-101796
  - Resolves: RHEL-101797
  - Resolves: RHEL-102283
  - Resolves: RHEL-102286
  - Resolves: RHEL-102285
  - Resolves: RHEL-102284
  - Require tzdata-java 2025b at runtime and for build
  - Set bundled freetype provide version to 2.13.3
  - Set bundled harfbuzz provide version to 10.4.0
  - Set bundled lcms2 provide version to 2.17.0
  - Set bundled libpng provide version to 1.6.47
  - Recommend pipewire
  - Related: RHEL-102667
  - Resolves: RHEL-102669
  - Resolves: RHEL-102670
  - Resolves: RHEL-102672
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.17.0.10-1
changelog:
  - Update to jdk-17.0.17+10 (GA)
  - Add to .gitignore openjdk-17.0.17+10.tar.xz
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - Set updatever to 17
  - Set buildver to 10
  - Set rpmrelease to 1, remove 'must start at 2' comment
  - Set bundled harfbuzz version to 11.2.0
  - Update sources to openjdk-17.0.17+10.tar.xz
  - Resolves: RHEL-119458
  - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.18.0.7-0.1.ea
changelog:
  - Update to jdk-17.0.18+7 (EA)
  - Add to .gitignore openjdk-17.0.18+7-ea.tar.xz
  - Set updatever to 18
  - Set buildver to 7
  - Set is_ga to 0
  - Update sources to openjdk-17.0.18+7-ea.tar.xz
  - Set bundled libpng version to 1.6.51
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.18.0.8-1
changelog:
  - Update to jdk-17.0.18+8 (GA)
  - Add to .gitignore openjdk-17.0.18+8.tar.xz
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - Set buildver to 8
  - Set is_ga to 1
  - Update sources to openjdk-17.0.18+8.tar.xz
  - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.2.0.8-4
changelog:
  - Restructure the build so a minimal initial build is then used for the final build (with docs)
  - This reduces pressure on the system JDK and ensures the JDK being built can do a full build
  - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
  - Handle Fedora in distro conditionals that currently only pertain to RHEL.
  - Run OpenJDK normalizer script on the spec file to fix further rogue whitespace
  - Sync gdb test with java-1.8.0-openjdk and improve architecture restrictions.
  - Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64)
  - Need to support noarch for creating source RPMs for non-scratch builds.
  - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
  - Support a HotSpot-only build so a freshly built libjvm.so can then be used in the bootstrap JDK.
  - Explicitly list JIT architectures rather than relying on those with slowdebug builds
  - Disable the serviceability agent on Zero architectures even when the architecture itself is supported
  - Resolves: rhbz#2022826


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.2.0.8-5
changelog:
  - Fix FIPS issues in native code and with initialisation of java.security.Security
  - Resolves: rhbz#2023531


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.2.0.8-6
changelog:
  - Separate crypto policy initialisation from FIPS initialisation, now they are no longer interdependent
  - Resolves: rhbz#2052819


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.2.0.8-8
changelog:
  - Detect NSS at runtime for FIPS detection
  - Turn off build-time NSS linking and go back to an explicit Requires on NSS
  - Resolves: rhbz#2052829


author: Jiri Vanek <jvanek@redhat.com> - 1:17.0.2.0.8-10
changelog:
  - Storing and restoring alterntives during update manually
  - Fixing Bug 2001567 - update of JDK/JRE is removing its manually selected alterantives and select (as auto) system JDK/JRE
  -- The move of alternatives creation to posttrans to fix:
  -- Bug 1200302 - dnf reinstall breaks alternatives
  -- Had caused the alternatives to be removed, and then created again,
  -- instead of being added, and then removing the old, and thus persisting
  -- the selection in family
  -- Thus this fix, is storing the family of manually selected master, and if
  -- stored, then it is restoring the family of the master
  - Resolves: rhbz#2008206


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.2.0.8-12
changelog:
  - Add rpminspect.yaml to turn off Java bytecode inspections
  - java-17-openjdk deliberately produces Java 17 bytecode, not the default Java 11 bytecode
  - Resolves: rhbz#2023540


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.2.0.8-13
changelog:
  - Enable AlgorithmParameters and AlgorithmParameterGenerator services in FIPS mode
  - Resolves: rhbz#2055383


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.3.0.7-1
changelog:
  - April 2022 security update to jdk 17.0.3+7
  - Update to jdk-17.0.3.0+7 tarball
  - Update release notes to 17.0.3.0+7
  - Add missing README.md and generate_source_tarball.sh
  - Resolves: rhbz#2073578


author: Francisco Ferrari Bihurriet <fferrari@redhat.com> - 1:17.0.3.0.7-2
changelog:
  - RH2007331: SecretKey generate/import operations don't add the CKA_SIGN attribute in FIPS mode
  - Resolves: rhbz#2105395


author: Jayashree Huttanagoudar <jhuttana@redhat.com> - 1:17.0.4.0.1-0.2.ea
changelog:
  - Fix issue where CheckVendor.java test erroneously passes when it should fail.
  - Add proper quoting so '&' is not treated as a special character by the shell.
  - Related: rhbz#2084779


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.4.0.8-1
changelog:
  - Update to jdk-17.0.4.0+8
  - Update release notes to 17.0.4.0+8
  - Need to include the '.S' suffix in debuginfo checks after JDK-8284661
  - Print release file during build, which should now include a correct SOURCE value from .src-rev
  - Update tarball script with IcedTea GitHub URL and .src-rev generation
  - Include script to generate bug list for release notes
  - Update tzdata requirement to 2022a to match JDK-8283350
  - Move EA designator check to prep so failures can be caught earlier
  - Make EA designator check non-fatal while upstream is not maintaining it
  - Explicitly require crypto-policies during build and runtime for system security properties
  - Make use of the vendor version string to store our version & release rather than an upstream release date
  - Include a test in the RPM to check the build has the correct vendor information.
  - Rebase FIPS patches from fips-17u branch and simplify by using a single patch from that repository
  - * RH2094027: SunEC runtime permission for FIPS
  - * RH2036462: sun.security.pkcs11.wrapper.PKCS11.getInstance breakage
  - * RH2090378: Revert to disabling system security properties and FIPS mode support together
  - Rebase RH1648249 nss.cfg patch so it applies after the FIPS patch
  - Enable system security properties in the RPM (now disabled by default in the FIPS repo)
  - Improve security properties test to check both enabled and disabled behaviour
  - Run security properties test with property debugging on
  - Turn on system security properties as part of the build's install section
  - Move cacerts replacement to install section and retain original of this and tzdb.dat
  - Run tests on the installed image, rather than the build image
  - Introduce variables to refer to the static library installation directories
  - Use relative symlinks so they work within the image
  - Run debug symbols check during build stage, before the install strips them
  - Resolves: rhbz#2084779
  - Resolves: rhbz#2099919
  - Resolves: rhbz#2107943
  - Resolves: rhbz#2107941
  - Resolves: rhbz#2106523


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.4.0.8-0.2.ea
changelog:
  - Revert the following changes until copy-java-configs has adapted to relative symlinks:
  - * Move cacerts replacement to install section and retain original of this and tzdb.dat
  - * Run tests on the installed image, rather than the build image
  - * Introduce variables to refer to the static library installation directories
  - * Use relative symlinks so they work within the image
  - * Run debug symbols check during build stage, before the install strips them
  - The move of turning on system security properties is retained so we don't ship with them off
  - Related: rhbz#2084779


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.4.1.1-1
changelog:
  - Update to jdk-17.0.4.1+1
  - Update release notes to 17.0.4.1+1
  - Add patch to provide translations for Europe/Kyiv added in tzdata2022b
  - Add test to ensure timezones can be translated
  - Resolves: rhbz#2120058


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.4.1.1-2
changelog:
  - Update FIPS support to bring in latest changes
  - * RH2023467: Enable FIPS keys export
  - * RH2104724: Avoid import/export of DH private keys
  - * RH2092507: P11Key.getEncoded does not work for DH keys in FIPS mode
  - * Build the systemconf library on all platforms
  - * RH2048582: Support PKCS#12 keystores
  - * RH2020290: Support TLS 1.3 in FIPS mode
  - Resolves: rhbz#2123579
  - Resolves: rhbz#2123580
  - Resolves: rhbz#2123581
  - Resolves: rhbz#2123583
  - Resolves: rhbz#2123584


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.4.0.1-0.1.ea
changelog:
  - Update to jdk-17.0.4.0+1
  - Update release notes to 17.0.4.0+1
  - Switch to EA mode for 17.0.4 pre-release builds.
  - Print release file during build, which should now include a correct SOURCE value from .src-rev
  - Update tarball script with IcedTea GitHub URL and .src-rev generation
  - Include script to generate bug list for release notes
  - Update tzdata requirement to 2022a to match JDK-8283350
  - Move EA designator check to prep so failures can be caught earlier
  - Make EA designator check non-fatal while upstream is not maintaining it
  - Related: rhbz#2084218


author: Jayashree Huttanagoudar <jhuttana@redhat.com> - 1:17.0.4.0.1-0.2.ea
changelog:
  - Fix issue where CheckVendor.java test erroneously passes when it should fail.
  - Add proper quoting so '&' is not treated as a special character by the shell.
  - Related: rhbz#2084218


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.4.0.7-0.1.ea
changelog:
  - Update to jdk-17.0.3.0+7
  - Update release notes to 17.0.3.0+7
  - Need to include the '.S' suffix in debuginfo checks after JDK-8284661
  - Explicitly require crypto-policies during build and runtime for system security properties
  - Make use of the vendor version string to store our version & release rather than an upstream release date
  - Include a test in the RPM to check the build has the correct vendor information.
  - Resolves: rhbz#2084218


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.4.0.7-0.2.ea
changelog:
  - Revert the following changes until copy-java-configs has adapted to relative symlinks:
  - * Move cacerts replacement to install section and retain original of this and tzdb.dat
  - * Run tests on the installed image, rather than the build image
  - * Introduce variables to refer to the static library installation directories
  - * Use relative symlinks so they work within the image
  - * Run debug symbols check during build stage, before the install strips them
  - The move of turning on system security properties is retained so we don't ship with them off
  - Related: rhbz#2084218


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.4.0.8-3
changelog:
  - Update to jdk-17.0.4.0+8
  - Update release notes to 17.0.4.0+8
  - Switch to GA mode for release
  - Resolves: rhbz#2106524


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.4.1.1-2
changelog:
  - Update to jdk-17.0.4.1+1
  - Update release notes to 17.0.4.1+1
  - Add patch to provide translations for Europe/Kyiv added in tzdata2022b
  - Add test to ensure timezones can be translated
  - Resolves: rhbz#2119532


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.4.1.1-3
changelog:
  - Update FIPS support to bring in latest changes
  - * RH2104724: Avoid import/export of DH private keys
  - * RH2092507: P11Key.getEncoded does not work for DH keys in FIPS mode
  - * Build the systemconf library on all platforms
  - * RH2048582: Support PKCS#12 keystores
  - * RH2020290: Support TLS 1.3 in FIPS mode
  - Resolves: rhbz#2104725
  - Resolves: rhbz#2117758
  - Resolves: rhbz#2115164
  - Resolves: rhbz#2029665


author: Stephan Bergmann <sbergman@redhat.com> - 1:17.0.4.1.1-4
changelog:
  - Fix flatpak builds (catering for their uncompressed manual pages)
  - Fix flatpak builds by exempting them from bootstrap
  - Resolves: rhbz#2102726


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.4.1.1-5
changelog:
  - Switch to static builds, reducing system dependencies and making build more portable
  - Resolves: rhbz#2121268


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.5.0.8-1
changelog:
  - Update to jdk-17.0.5+8 (GA)
  - Update release notes to 17.0.5+8 (GA)
  - Bump HarfBuzz bundled version to 4.4.1 following JDK-8289853
  - Bump FreeType bundled version to 2.12.1 following JDK-8290334
  - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
  - Update CLDR data with Europe/Kyiv (JDK-8293834)
  - Drop JDK-8292223 patch which we found to be unnecessary
  - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
  - The stdc++lib, zlib & freetype options should always be set from the global, so they are not altered for staticlibs builds
  - Remove freetype sources along with zlib sources
  - Resolves: rhbz#2132933
  - Resolves: rhbz#2133695


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.5.0.1-0.1.ea
changelog:
  - Update to jdk-17.0.5+1
  - Update release notes to 17.0.5+1
  - Switch to EA mode for 17.0.5 pre-release builds.
  - Related: rhbz#2132934


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.5.0.8-1
changelog:
  - Update to jdk-17.0.5+8 (GA)
  - Update release notes to 17.0.5+8 (GA)
  - Switch to GA mode for final release.
  - * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
  - Resolves: rhbz#2132934


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.5.0.8-2
changelog:
  - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
  - Update CLDR data with Europe/Kyiv (JDK-8293834)
  - Drop JDK-8292223 patch which we found to be unnecessary
  - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
  - Related: rhbz#2132934


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.5.0.8-4
changelog:
  - Update FIPS support to bring in latest changes
  - * Add nss.fips.cfg support to OpenJDK tree
  - * RH2117972: Extend the support for NSS DBs (PKCS11) in FIPS mode
  - * Remove forgotten dead code from RH2020290 and RH2104724
  - Drop local nss.fips.cfg.in handling now this is handled in the patched OpenJDK build
  - Resolves: rhbz#2147476


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.6.0.1-0.2.ea
changelog:
  - Update to jdk-17.0.6+1
  - Update release notes to 17.0.6+1
  - Switch to EA mode for 17.0.6 pre-release builds.
  - Re-enable EA upstream status check now it is being actively maintained.
  - Drop JDK-8294357 (tzdata2022d) & JDK-8295173 (tzdata2022e) local patches which are now upstream
  - Drop JDK-8275535 local patch now this has been accepted and backported upstream
  - Bump tzdata requirement to 2022e now the package is available in RHEL
  - Related: rhbz#2153097


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.6.0.9-0.2.ea
changelog:
  - Update to jdk-17.0.6+9
  - Update release notes to 17.0.6+9
  - Drop local copy of JDK-8293834 now this is upstream
  - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
  - Update TestTranslations.java to test the new America/Ciudad_Juarez zone
  - Resolves: rhbz#2153097


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.6.0.10-2
changelog:
  - Update to jdk-17.0.6.0+10
  - Update release notes to 17.0.6.0+10
  - Switch to GA mode for release
  - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
  - Related: rhbz#2153097


author: Stephan Bergmann <sbergman@redhat.com> - 1:17.0.6.0.10-3
changelog:
  - Fix flatpak builds by disabling TestTranslations test due to missing tzdb.dat
  - Related: rhbz#2160111


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.6.0.10-3
changelog:
  - Update FIPS support to bring in latest changes
  - * OJ1357: Fix issue on FIPS with a SecurityManager in place
  - Related: rhbz#2147476


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.7.0.7-1
changelog:
  - Update to jdk-17.0.7.0+7
  - Update release notes to 17.0.7.0+7
  - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
  - Update generate_tarball.sh to add support for passing a boot JDK to the configure run
  - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
  - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
  - Update FIPS support against 17.0.7+6 and bring in latest changes:
  - * RH2134669: Add missing attributes when registering services in FIPS mode.
  - * test/jdk/sun/security/pkcs11/fips/VerifyMissingAttributes.java: fixed jtreg main class
  - * RH1940064: Enable XML Signature provider in FIPS mode
  - * RH2173781: Avoid calling C_GetInfo() too early, before cryptoki is initialized
  - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
  - Resolves: rhbz#2185182
  - Resolves: rhbz#2186804
  - Resolves: rhbz#2186811
  - Resolves: rhbz#2186807


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.6.0.9-0.3.ea
changelog:
  - Update to jdk-17.0.6+9
  - Update release notes to 17.0.6+9
  - Drop local copy of JDK-8293834 now this is upstream
  - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
  - Update TestTranslations.java to test the new America/Ciudad_Juarez zone
  - Resolves: rhbz#2150198


author: Stephan Bergmann <sbergman@redhat.com> - 1:17.0.6.0.9-0.4.ea
changelog:
  - Fix flatpak builds by disabling TestTranslations test due to missing tzdb.dat
  - Related: rhbz#2150198


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.7.0.7-4
changelog:
  - Following JDK-8005165, class data sharing can be enabled on all JIT architectures
  - Related: rhbz#2203412


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.8.0.1-0.1.ea
changelog:
  - Update to jdk-17.0.8+1 (EA)
  - Update release notes to 17.0.8+1
  - Switch to EA mode
  - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 17.0.8+1
  - Bump bundled LCMS version to 2.15 as in jdk-17.0.8+1.
  - Bump bundled HarfBuzz version to 7.0.1 as in jdk-17.0.8+1
  - Use tapsets from the misc tarball
  - Introduce 'prelease' for the portable release versioning, to handle EA builds
  - Make sure root installation directory is created first
  - Use in-place substitution for all but the first of the tapset changes
  - Related: rhbz#2217716


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.8.0.6-0.1.ea
changelog:
  - Update to jdk-17.0.8+6 (EA)
  - Sync the copy of the portable specfile with the latest update
  - Resolves: rhbz#2217716


author: Lukáš Lipinský <lukas.lipinsky@oracle.com> - 1:17.0.8.0.7-2.0.1
changelog:
  - OpenJDK: ZIP file parsing infinite loop (8302483) (CVE-2023-22036)
  - OpenJDK: weakness in AES implementation (8308682) (CVE-2023-22041)
  - OpenJDK: improper handling of slash characters in URI-to-path conversion (8305312) (CVE-2023-22049)
  - harfbuzz: OpenJDK: O(n^2) growth via consecutive marks (CVE-2023-25193)
  - OpenJDK: HTTP client insufficient file name validation (8302475) (CVE-2023-22006)
  - OpenJDK: modulo operator array indexing issue (8304460) (CVE-2023-22044)
  - OpenJDK: array indexing integer overflow issue (8304468) (CVE-2023-22045)
  - Add Oracle vendor bug URL [Orabug: 34340155]


author: Jiri Vanek <jvanek@redhat.com> - 1:20.0.0.0.36-1
changelog:
  - Dropped JDK-8295447, JDK-8296239 & JDK-8299439 patches now upstream
  - Adapted rh1750419-redhat_alt_java.patch
  - Related: RHEL-12997


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:20.0.0.0.36-1
changelog:
  - Update to jdk-20.0.2+9
  - Update release notes to 20.0.2+9
  - Update system crypto policy & FIPS patch from new fips-20u tree
  - Update generate_tarball.sh ICEDTEA_VERSION
  - Update CLDR reference data following update to 42 (Rocky Mountain-Normalzeit => Rocky-Mountain-Normalzeit)
  - Related: RHEL-12997


author: Petra Alice Mikova <pmikova@redhat.com> - 1:21.0.0.0.35-1
changelog:
  - Replace smoke test files used in the staticlibs test, as fdlibm was removed by JDK-8303798
  - Related: RHEL-12997


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.0.0.35-1
changelog:
  - Update to jdk-21.0.0+35
  - Update system crypto policy & FIPS patch from new fips-21u tree
  - Update generate_tarball.sh to sync with upstream vanilla script inc. no more ECC removal
  - Drop fakefeaturever now it is no longer needed
  - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
  - Use upstream release URL for OpenJDK source
  - Re-enable tzdata tests now we are on the latest JDK and things are back in sync
  - Install jaxp.properties introduced by JDK-8303530
  - Install lible.so introduced by JDK-8306983
  - Related: RHEL-12997


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.0.0.35-2
changelog:
  - Update documentation (README.md)
  - Replace alt-java patch with a binary separate from the JDK
  - Drop stale patches that are of little use any more:
  - * nss.cfg has been disabled since early PKCS11 work and long superseded by FIPS work
  - * No accessibility subpackage to warrant RH1648242 & RH1648644 patches any more
  - * No use of system libjpeg turbo to warrant RH649512 patch any more
  - Replace RH1684077 pcsc-lite-libs patch with better JDK-8009550 fix being upstreamed
  - Adapt alt-java test to new binary where there is always a set_speculation function
  - Related: RHEL-12997


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.1.0.12-1
changelog:
  - Update to jdk-21.0.1.0+12 (GA)
  - Update release notes to 21.0.1.0+12
  - Sync the copy of the portable specfile with the latest update
  - Update openjdk_news script to specify subdirectory last
  - Add missing discover_trees script required by openjdk_news
  - Synchronise bundled versions with 21u sources (FreeType, LCMS, HarfBuzz, libpng)
  - Sync generate_tarball.sh with 11u & 17u version
  - Update bug URL for RHEL to point to the Red Hat customer portal
  - Fix upstream release URL for OpenJDK source
  - Following JDK-8005165, class data sharing can be enabled on all JIT architectures
  - Use tapsets from the misc tarball
  - Introduce 'prelease' for the portable release versioning, to handle EA builds
  - Make sure root installation directory is created first
  - Use in-place substitution for all but the first of the tapset changes
  - Synchronise runtime and buildtime tzdata requirements
  - Remove ghosts for binaries not in java-21-openjdk (pack200, rmid, unpack200)
  - Add missing jfr, jpackage and jwebserver alternative ghosts
  - Move jcmd to the headless package
  - Revert alt-java binary location to being within the JDK tree
  - Resolves: RHEL-12997
  - Resolves: RHEL-14954
  - Resolves: RHEL-14962
  - Resolves: RHEL-14958
  - Related: RHEL-14946
  - Resolves: RHEL-14959
  - Resolves: RHEL-14948


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.1.0.12-2
changelog:
  - Switch to using portable binaries built on RHEL 7
  - Sync the copy of the portable specfile with the RHEL 7 version
  - Related: RHEL-12997


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.1-0.1.ea
changelog:
  - Update get_bundle_versions.sh to match other scripts
  - * get_bundle_versions.sh: Add license
  - * get_bundle_versions.sh: Set compile-command in Emacs
  - * get_bundle_versions.sh: Use different error codes for different failures
  - * get_bundle_versions.sh: Remove unneeded '.' in JPEG version
  - * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086)
  - * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002)
  - Add OpenJDK 8u support to get_bundle_versions.sh
  - Print bundle updates and backouts at end of openjdk_news.sh output
  - Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh
  - Related: RHEL-103209


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.2-0.1.ea
changelog:
  - Update to jdk-21.0.8+2 (EA)
  - Update release notes to 21.0.8+2
  - Sync the copy of the portable specfile with the latest update
  - Add timezone data update check to openjdk_news.sh
  - Add duplicate check to openjdk_news.sh
  - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh
  - Related: RHEL-101798
  - Resolves: RHEL-103209


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.8-0.1.ea
changelog:
  - Update to jdk-21.0.8+8 (EA)
  - Update release notes to 21.0.8+8
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-101798


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:21.0.7.0.6-3
changelog:
  - Recommend PipeWire on RHEL 9 and later for java.awt.Robot screenshots under Wayland
  - Resolves: RHEL-102677


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.9-1
changelog:
  - Update to jdk-21.0.8+9 (GA)
  - Update release notes to 21.0.8+9
  - Switch to GA mode
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **
  - Resolves: RHEL-102289


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.9.0.10-1
changelog:
  - Update to jdk-21.0.9+10 (GA)
  - Update release notes to 21.0.9+10
  - Bump harfbuzz version to 11.2.0 following JDK-8355528
  - Add NEWS corrections from Thomas
  - Use double spacing consistently in notes for this release
  - Correct 11u release reference to corresponding 21u release as pointed out by Kieran
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
  - Resolves: RHEL-118774
  - Resolves: RHEL-119466


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.9.0.10-2
changelog:
  - Bump rpmrelease for CentOS build
  - Add scripts to handle tagging of portable-based RPMs
  - Related: RHEL-118774
  - Related: RHEL-119466


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.10.0.7-1
changelog:
  - Update to jdk-21.0.10+7 (GA)
  - Update release notes to 21.0.10+7
  - Bump libpng version to 1.6.51 following JDK-8372534
  - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
  - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-142859
  - Resolves: RHEL-139560
  - Resolves: RHEL-131592
  - Resolves: RHEL-131602
  - Resolves: RHEL-122121
  - Resolves: RHEL-142820
  - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.1.0.12-3
changelog:
  - Include JDK-8311630 patch to implement Foreign Function & Memory preview API on s390x
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-16386


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.2.0.13-1
changelog:
  - Update to jdk-21.0.2+13 (GA)
  - Sync the copy of the portable specfile with the latest update
  - Bump libpng version to 1.6.40 following JDK-8316030
  - Bump HarfBuzz version to 8.2.2 following JDK-8313643
  - Drop local JDK-8311630 patch which is now upstream
  - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
  - Resolves: RHEL-20998


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.1-0.1.ea
changelog:
  - Update to jdk-21.0.3+1 (EA)
  - Update release notes to 21.0.3+1
  - Switch to EA mode
  - Require tzdata 2023d due to upstream inclusion of JDK-8322725
  - Bump FreeType version to 2.13.2 following JDK-8316028
  - Related: RHEL-30945


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.1-0.2.ea
changelog:
  - Install alt-java man page from the misc tarball as it is no longer in the JDK image
  - generate_source_tarball.sh: Update examples in header for clarity
  - generate_source_tarball.sh: Cleanup message issued when checkout already exists
  - generate_source_tarball.sh: Create directory in TMPDIR when using WITH_TEMP
  - generate_source_tarball.sh: Only add --depth=1 on non-local repositories
  - Move maintenance scripts to a scripts subdirectory
  - discover_trees.sh: Set compile-command and indentation instructions for Emacs
  - discover_trees.sh: shellcheck: Do not use -o (SC2166)
  - discover_trees.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - discover_trees.sh: shellcheck: Double-quote variable references (SC2086)
  - generate_source_tarball.sh: Add authorship
  - icedtea_sync.sh: Set compile-command and indentation instructions for Emacs
  - icedtea_sync.sh: shellcheck: Double-quote variable references (SC2086)
  - icedtea_sync.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - openjdk_news.sh: Set compile-command and indentation instructions for Emacs
  - openjdk_news.sh: shellcheck: Double-quote variable references (SC2086)
  - openjdk_news.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - openjdk_news.sh: shellcheck: Remove deprecated egrep usage (SC2196)
  - generate_source_tarball.sh: Output values of new options WITH_TEMP and OPENJDK_LATEST
  - generate_source_tarball.sh: Double-quote DEPTH reference (SC2086)
  - generate_source_tarball.sh: Avoid empty DEPTH reference while still appeasing shellcheck
  - Related: RHEL-30945


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:21.0.3.0.1-0.2.ea
changelog:
  - Invoke xz in multi-threaded mode
  - generate_source_tarball.sh: Add WITH_TEMP environment variable
  - generate_source_tarball.sh: Multithread xz on all available cores
  - generate_source_tarball.sh: Add OPENJDK_LATEST environment variable
  - generate_source_tarball.sh: Update comment about tarball naming
  - generate_source_tarball.sh: Reformat comment header
  - generate_source_tarball.sh: Reformat and update help output
  - generate_source_tarball.sh: Do a shallow clone, for speed
  - generate_source_tarball.sh: Append -ea designator when required
  - generate_source_tarball.sh: Eliminate some removal prompting
  - generate_source_tarball.sh: Make tarball reproducible
  - generate_source_tarball.sh: Prefix temporary directory with temp-
  - generate_source_tarball.sh: Remove temporary directory exit conditions
  - generate_source_tarball.sh: Fix -ea logic to add dash
  - generate_source_tarball.sh: Set compile-command in Emacs
  - generate_source_tarball.sh: Remove REPO_NAME from FILE_NAME_ROOT
  - generate_source_tarball.sh: Move PROJECT_NAME and REPO_NAME checks
  - generate_source_tarball.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - generate_source_tarball.sh: shellcheck: Double-quote variable references (SC2086)
  - generate_source_tarball.sh: shellcheck: Do not use -a (SC2166)
  - generate_source_tarball.sh: shellcheck: Do not use $ on arithmetic variables (SC2004)
  - Use backward-compatible patch syntax
  - generate_source_tarball.sh: Ignore -ga tags with OPENJDK_LATEST
  - generate_source_tarball.sh: Fix whitespace
  - generate_source_tarball.sh: Remove trailing period in echo
  - generate_source_tarball.sh: Use long-style argument to grep
  - generate_source_tarball.sh: Add license
  - generate_source_tarball.sh: Add indentation instructions for Emacs
  - Related: RHEL-30945


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.7-0.1.ea
changelog:
  - Update to jdk-21.0.3+7 (EA)
  - Update release notes to 21.0.3+7
  - Require tzdata 2024a due to upstream inclusion of JDK-8322725
  - Only require tzdata 2023d for now as 2024a is unavailable in buildroot
  - Drop JDK-8009550 which is now available upstream
  - Re-generate FIPS patch against 21.0.3+7 following backport of JDK-8325254
  - Resolves: RHEL-30945


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.9-1
changelog:
  - Update to jdk-21.0.3+9 (GA)
  - Update release notes to 21.0.3+9
  - Switch to GA mode.
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
  - Resolves: RHEL-32423


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.1-0.1.ea
changelog:
  - Update to jdk-21.0.3+1 (EA)
  - Update release notes to 21.0.3+1
  - Switch to EA mode
  - Require tzdata 2023d due to upstream inclusion of JDK-8322725
  - Bump FreeType version to 2.13.2 following JDK-8316028
  - Related: RHEL-30946


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.1-0.2.ea
changelog:
  - Install alt-java man page from the misc tarball as it is no longer in the JDK image
  - generate_source_tarball.sh: Update examples in header for clarity
  - generate_source_tarball.sh: Cleanup message issued when checkout already exists
  - generate_source_tarball.sh: Create directory in TMPDIR when using WITH_TEMP
  - generate_source_tarball.sh: Only add --depth=1 on non-local repositories
  - Move maintenance scripts to a scripts subdirectory
  - discover_trees.sh: Set compile-command and indentation instructions for Emacs
  - discover_trees.sh: shellcheck: Do not use -o (SC2166)
  - discover_trees.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - discover_trees.sh: shellcheck: Double-quote variable references (SC2086)
  - generate_source_tarball.sh: Add authorship
  - icedtea_sync.sh: Set compile-command and indentation instructions for Emacs
  - icedtea_sync.sh: shellcheck: Double-quote variable references (SC2086)
  - icedtea_sync.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - openjdk_news.sh: Set compile-command and indentation instructions for Emacs
  - openjdk_news.sh: shellcheck: Double-quote variable references (SC2086)
  - openjdk_news.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - openjdk_news.sh: shellcheck: Remove deprecated egrep usage (SC2196)
  - generate_source_tarball.sh: Output values of new options WITH_TEMP and OPENJDK_LATEST
  - generate_source_tarball.sh: Double-quote DEPTH reference (SC2086)
  - generate_source_tarball.sh: Avoid empty DEPTH reference while still appeasing shellcheck
  - Related: RHEL-30946


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:21.0.3.0.1-0.2.ea
changelog:
  - Invoke xz in multi-threaded mode
  - generate_source_tarball.sh: Add WITH_TEMP environment variable
  - generate_source_tarball.sh: Multithread xz on all available cores
  - generate_source_tarball.sh: Add OPENJDK_LATEST environment variable
  - generate_source_tarball.sh: Update comment about tarball naming
  - generate_source_tarball.sh: Reformat comment header
  - generate_source_tarball.sh: Reformat and update help output
  - generate_source_tarball.sh: Do a shallow clone, for speed
  - generate_source_tarball.sh: Append -ea designator when required
  - generate_source_tarball.sh: Eliminate some removal prompting
  - generate_source_tarball.sh: Make tarball reproducible
  - generate_source_tarball.sh: Prefix temporary directory with temp-
  - generate_source_tarball.sh: Remove temporary directory exit conditions
  - generate_source_tarball.sh: Fix -ea logic to add dash
  - generate_source_tarball.sh: Set compile-command in Emacs
  - generate_source_tarball.sh: Remove REPO_NAME from FILE_NAME_ROOT
  - generate_source_tarball.sh: Move PROJECT_NAME and REPO_NAME checks
  - generate_source_tarball.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - generate_source_tarball.sh: shellcheck: Double-quote variable references (SC2086)
  - generate_source_tarball.sh: shellcheck: Do not use -a (SC2166)
  - generate_source_tarball.sh: shellcheck: Do not use $ on arithmetic variables (SC2004)
  - Use backward-compatible patch syntax
  - generate_source_tarball.sh: Ignore -ga tags with OPENJDK_LATEST
  - generate_source_tarball.sh: Fix whitespace
  - generate_source_tarball.sh: Remove trailing period in echo
  - generate_source_tarball.sh: Use long-style argument to grep
  - generate_source_tarball.sh: Add license
  - generate_source_tarball.sh: Add indentation instructions for Emacs
  - Related: RHEL-30946


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.7-0.1.ea
changelog:
  - Update to jdk-21.0.3+7 (EA)
  - Update release notes to 21.0.3+7
  - Require tzdata 2024a due to upstream inclusion of JDK-8322725
  - Only require tzdata 2023d for now as 2024a is unavailable in buildroot
  - Drop JDK-8009550 which is now available upstream
  - Re-generate FIPS patch against 21.0.3+7 following backport of JDK-8325254
  - Resolves: RHEL-30946


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.9-1
changelog:
  - Update to jdk-21.0.3+9 (GA)
  - Update release notes to 21.0.3+9
  - Switch to GA mode.
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
  - Resolves: RHEL-32424


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.4.0.1-0.1.ea
changelog:
  - Update to jdk-21.0.4+1 (EA)
  - Update release notes to 21.0.4+1
  - Switch to EA mode
  - Bump LCMS 2 version to 2.16.0 following JDK-8321489
  - Add zlib build requirement or bundled version (1.3.1), depending on system_libs setting
  - Restore NEWS file so portable can be rebuilt
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-45356
  - Resolves: RHEL-46028


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.4.0.5-0.1.ea
changelog:
  - Update to jdk-21.0.4+5 (EA)
  - Update release notes to 21.0.4+5
  - Limit Java only tests to one architecture using jdk_test_arch
  - Actually require tzdata 2024a now it is available in the buildroot
  - Resolves: RHEL-45356
  - Resolves: RHEL-47399


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.4.0.7-1
changelog:
  - Update to jdk-21.0.4+7 (GA)
  - Update release notes to 21.0.4+7
  - Switch to GA mode.
  - Sync the copy of the portable specfile with the latest update
  - Add missing section headers in NEWS
  - ** This tarball is embargoed until 2024-07-16 @ 1pm PT. **
  - Resolves: RHEL-47022


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.4.0.1-0.1.ea
changelog:
  - Update to jdk-21.0.4+1 (EA)
  - Update release notes to 21.0.4+1
  - Switch to EA mode
  - Bump LCMS 2 version to 2.16.0 following JDK-8321489
  - Add zlib build requirement or bundled version (1.3.1), depending on system_libs setting
  - Restore NEWS file so portable can be rebuilt
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-45355
  - Resolves: RHEL-46029


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.4.0.5-0.1.ea
changelog:
  - Update to jdk-21.0.4+5 (EA)
  - Update release notes to 21.0.4+5
  - Limit Java only tests to one architecture using jdk_test_arch
  - Actually require tzdata 2024a now it is available in the buildroot
  - Resolves: RHEL-45355
  - Resolves: RHEL-47395


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.4.0.7-1
changelog:
  - Update to jdk-21.0.4+7 (GA)
  - Update release notes to 21.0.4+7
  - Switch to GA mode.
  - Sync the copy of the portable specfile with the latest update
  - Add missing section headers in NEWS
  - ** This tarball is embargoed until 2024-07-16 @ 1pm PT. **
  - Resolves: RHEL-47023


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.4.0.7-2
changelog:
  - Vary portablesuffix depending on whether we are on RHEL ('el8') or CentOS ('el9')
  - Handle debugedit being a separate package installed in /usr on RHEL/CentOS 10
  - Add build scripts to repository to ease remembering all CentOS & RHEL targets and options
  - Related: RHEL-58797


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.9-0.2.ea
changelog:
  - Update to jdk-21.0.5+9 (EA)
  - Update release notes to 21.0.5+9
  - Switch to EA mode
  - Bump giflib version to 5.2.2 following JDK-8328999
  - Bump libpng version to 1.6.43 following JDK-8329004
  - Sync with RHEL 7 portable build:
    - Use ExclusiveArch over ExcludeArch
    - pkgos definition needs to be early enough to be used in portablesuffix
  - Make build scripts executable
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-58797
  - Resolves: RHEL-17191


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.10-2
changelog:
  - Update to jdk-21.0.5+10 (GA)
  - Update release notes to 21.0.5+10
  - Switch to GA mode.
  - Revert JDK-8327501 & JDK-8328366 backport until more mature.
  - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. **
  - Resolves: RHEL-61344


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.10-3
changelog:
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. **
  - Related: RHEL-61344


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.11-2
changelog:
  - Update to jdk-21.0.5+11 (GA)
  - Update release notes to 21.0.5+11
  - Remove local JDK-8327501 & JDK-8328366 backport as this is now upstream.
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-61344


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.11-3
changelog:
  - Transition to the devkit build by not defining pkgos
  - Exempt x86_64 from the static libs debuginfo test until portable uses an older DWARF version
  - Sync the copy of the portable specfile with the devkit version
  - Include the devkit specfile and patches
  - Document the devkit in README.md
  - Resolves: RHEL-74403


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.6.0.7-1
changelog:
  - Update to jdk-21.0.6+7 (GA)
  - Update release notes to 21.0.6+7
  - Sync the copy of the portable & devkit specfiles with the latest update
  - Include the latest devkit patches
  - Update README.md to list an easier way of disabling the devkit
  - ** This tarball is embargoed until 2025-01-21 @ 1pm PT. **
  - Resolves: RHEL-73562


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.7.0.6-1
changelog:
  - Update to jdk-21.0.7+6 (GA)
  - Update release notes to 21.0.7+6
  - Rebase FIPS support against 21.0.7+5
  - Require tzdata 2025a due to upstream inclusion of JDK-8347965
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-04-15 @ 1pm PT. **
  - Resolves: RHEL-86984
  - Resolves: RHEL-86621


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.7.0.6-2
changelog:
  - Add local version of JDK-8351500 for early interim release before 21.0.8
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-90309


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.1-0.1.ea
changelog:
  - Update to jdk-21.0.8+1 (EA)
  - Update release notes to 21.0.8+1
  - Bump freetype version to 2.13.3 following JDK-8348596
  - Bump harfbuzz version to 10.4.0 following JDK-8348597
  - Bump lcms2 version to 2.17.0 following JDK-8348110
  - Bump libpng version to 1.6.47 following JDK-8348598
  - Switch to EA mode
  - Drop JDK-8351500 local patch which is now available in 21.0.8+1 upstream
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-101798


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.1.0.8-1
changelog:
  - Create java-25-openjdk package based on java-21-openjdk
  - Update to jdk-25.0.1+8 (GA)
  - Update release notes with features of JDK 22, 23, 24 & 25
  - Mention finalisation JEP for features finalised in JDK 22, 23 & 24
  - Update release notes to 25.0.1+8
  - Update README file for java-25-openjdk
  - Make sure this is not the default/system JDK providing 'java', 'jre', 'java-devel' ,etc.
  - Remove 21u FIPS patch and disable use until we are ready for the 25 version
  - Adjust CLDR expectations in TestTranslations.java after JDK-8317979 started using tzdata values
  - Adjust TestTranslations.java to expect the same short name throughout for fr_FR and de_DE (bug?)
  - Remove references to libsystemconf.so and nss.fips.cfg from the 21u FIPS patch
  - Include static libraries in the vm_variant subdirectory after JDK-8307858 (libjvm.a)
  - Flip equals test in TestSecurityProperties.java to handle null values from Security.getProperty
  - Introduce crypto_policy_active to designate whether we should expect policy adherence in testing
  - Flip crypto_policy_active to false while the crypto policy & FIPS patch is not present
  - Handle new libsimdsort.so introduced on x86_64 only by JDK-8309130
  - Remove lible.so handling following its removal in JDK-8327476: "Upgrade JLine to 3.26.1"
  - Install jaxp-strict.properties.template added by JDK-8330542: "Template for Creating Strict JAXP Configuration File"
  - alt-java man page installation is now handled by the OpenJDK build
  - Adjust TestTranslations.java with updated German translations from CLDR 46 (JDK-8333582) (Mountain->Mountains)
  - Run javap with the disassembled code (-c) option now required for -l by JDK-8345145
  - Remove default.policy and java.policy following JDK-8338411: "Permanently Disable the Security Manager"
  - Make man page handling dependent on pandoc being available during the portable build
  - Handle new CDS archive variants (*_coh*) added by Compact Object Headers (JDK-8305895)
  - Add missing man page alternatives for jdeprscan, jfr, jhsdb, jimage, jlink & jmod and fix alphabetical ordering
  - Support jnativescan added by JDK-8317611: "Add a tool like jdeprscan to find usage of restricted methods"
  - Add recent native libraries to _privatelibs (libjsvml.so, libsimdsort.so, libsyslookup.so)
  - Support libsleef on AArch64 & RISC-V added by JDK-8329816, JDK-8320500 (RISC-V) & JDK-8312425 (AArch64)
  - Remove superfluous backslashes that cause two alternative commands to be combined
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-126022


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:25.0.1.0.8-1
changelog:
  - Add libnssadapter.so
  - Add FIPS crypto-policies configuration
  - Remove obsolete security.useSystemPropertiesFile setup
  - Update TestSecurityProperties.java test and calling convention
  - Resolves: RHEL-128414
  - Resolves: RHEL-128412


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.1.0.8-1
changelog:
  - Pass ourflags and ourldflags into the nssadapter build using CFLAGS & LDFLAGS
  - Patch the nssadapter build to recognise LDFLAGS
  - Resolves: RHEL-131898


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:25.0.1.0.8-2
changelog:
  - Add java-25-openjdk-crypto-adapter subpackage
  - Update library setting in create-redhat-properties-files.bash
  - Remove /usr/lib/jvm/java-25-openjdk/conf/security/redhat/fips.properties
  - Resolves: RHEL-132520
  - Resolves: RHEL-132523


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.1.0.8-2
changelog:
  - Incorporate new FIPS patch for 25u
  - Drop static libjvm.a following adjusted build target for portable build
  - Remove redundant (and now outdated) build targets, jdkimage and static_libs_image
  - Remove OpenJDK compiler flag filters and use build_{c,ld}flags directly
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-133743
  - Resolves: RHEL-133737
  - Related: RHEL-131898


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.2.0.10-1
changelog:
  - Update to jdk-25.0.2+10 (GA)
  - Update release notes to 25.0.2+10
  - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3
  - Bump libpng version to 1.6.51 following JDK-8372534
  - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch
  - Test for java.security's existence in create-redhat-properties-files.bash
  - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
  - Resolves: RHEL-139577
  - Resolves: RHEL-143373
  - Resolves: RHEL-143368
  - Resolves: RHEL-142856
  - Resolves: RHEL-142808


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.2.0.10-2
changelog:
  - Bump rpmrelease for CentOS build
  - Related: RHEL-139577
  - Related: RHEL-142856
  - Related: RHEL-142808


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.2.0.10-3
changelog:
  - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
  - Fix FIPS issue list to represent the new 25u version
  - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
  - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
  - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
  - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526
  - Bump harfbuzz version to 12.3.2 following JDK-8375057
  - Bump nssadapter version to bring in shared PKCS11 session fix
  - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
  - Add tagging scripts with signature checks and gating handling
  - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3.
  - Add gating scripts to simplify obtaining results and waiving issues
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-155001
  - Resolves: RHEL-147354
  - Resolves: RHEL-148410
  - Resolves: RHEL-148997
  - Resolves: RHEL-155047
  - Resolves: RHEL-155330
  - Resolves: RHEL-156036
  - Resolves: RHEL-156040


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:25.0.2.0.10-3
changelog:
  - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
  - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
  - Resolves: RHEL-149786


author: Darren Archibald <darren.archibald@oracle.com> - 6.0.0-7
changelog:
  - Use Java 11 build tool bindings for package builds
  - Make OpenJDK 17 the default JRE/JDK
  - Related: RHEL-62403
  - Include java-21-headless in generated auto-requires
  - Related: RHEL-62409


author: Vladis Dronov <vdronov@redhat.com> - 3.0.2.git.d18d5863-1
changelog:
  - Update to the upstream v3.0.2 + tip of origin/master
    with fixes for an important issue:
    https://github.com/nhorman/rng-tools/pull/123
    https://github.com/smuellerDD/jitterentropy-library/issues/37
  - Add important upstream fixes for the one CPU case (bz 1974132)


author: Vladis Dronov <vdronov@redhat.com> - 3.0.2-2.git.409828cf
changelog:
  - Update to the latest upstream commits upto 409828cf (bz 1973157)
  - Add clock_gettime() software time source
  - Add a code for choosing between software and hardware time sources
    https://github.com/smuellerDD/jitterentropy-library/pull/57
    https://bugzilla.redhat.com/show_bug.cgi?id=1974132


author: Vladis Dronov <vdronov@redhat.com> - 3.3.1-2
changelog:
  - Update to the upstream v3.3.1 @ 887c9871 (bz 2015560)
  - Fix a security issue found by a covscan in jitterentropy library


author: Björn Esser <besser82@fedoraproject.org> - 0.14-2
changelog:
  - Add a patch to backport fixes applied on upstream master branch
  - Re-enable RDRAND as json-c can detect broken implementations in CPUs now
  - Disable -Werror during build


author: Björn Esser <besser82@fedoraproject.org> - 0.14-6
changelog:
  - Build using Ninja instead of Make
  - Add a patch to move Doxyfile into doc subdir
  - Remove pre-built html documentation
  - Update Doxyfile during %prep
  - Add a patch to apply some optimizations to arraylist
  - Hardlink the files in %_pkgdocdir


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.4.1.el9]
changelog:
  - iwlwifi: limit fw version for AC9560 to avoid fw crash (Íñigo Huguet) [2096128]
  - configs: enable CONFIG_HP_ILO for aarch64 (Mark Salter) [2126153]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.5.1.el9_1]
changelog:
  - redhat: change default dist suffix for RHEL 9.1 (Patrick Talbert)
  - netfilter: nf_tables: clean up hook list when offload flags check fails (Florian Westphal) [2121393]
  - netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find() (Florian Westphal) [2121393]
  - netfilter: nf_conntrack_irc: Fix forged IP logic (Florian Westphal) [2121393]
  - netfilter: nf_conntrack_irc: Tighten matching on DCC message (Florian Westphal) [2121393]
  - netfilter: br_netfilter: Drop dst references before setting. (Florian Westphal) [2121393]
  - netfilter: flowtable: fix stuck flows on cleanup due to pending work (Florian Westphal) [2121393]
  - netfilter: flowtable: add function to invoke garbage collection immediately (Florian Westphal) [2121393]
  - netfilter: nf_tables: disallow binding to already bound chain (Florian Westphal) [2121393]
  - netfilter: nft_tunnel: restrict it to netdev family (Florian Westphal) [2121393]
  - netfilter: nf_tables: disallow updates of implicit chain (Florian Westphal) [2121393]
  - netfilter: nft_tproxy: restrict to prerouting hook (Florian Westphal) [2121393]
  - netfilter: ebtables: reject blobs that don't provide all entry points (Florian Westphal) [2121393]
  - netfilter: nf_tables: check NFT_SET_CONCAT flag if field_count is specified (Florian Westphal) [2121393]
  - netfilter: nf_tables: disallow NFT_SET_ELEM_CATCHALL and NFT_SET_ELEM_INTERVAL_END (Florian Westphal) [2121393]
  - netfilter: nf_tables: NFTA_SET_ELEM_KEY_END requires concat and interval flags (Florian Westphal) [2121393]
  - netfilter: nf_tables: validate NFTA_SET_ELEM_OBJREF based on NFT_SET_OBJECT flag (Florian Westphal) [2121393]
  - netfilter: nf_tables: possible module reference underflow in error path (Florian Westphal) [2121393]
  - netfilter: nf_tables: disallow NFTA_SET_ELEM_KEY_END with NFT_SET_ELEM_INTERVAL_END flag (Florian Westphal) [2121393]
  - netfilter: nf_tables: use READ_ONCE and WRITE_ONCE for shared generation id access (Florian Westphal) [2121393]
  - netfilter: nf_tables: fix null deref due to zeroed list head (Florian Westphal) [2121393]
  - netfilter: nf_tables: disallow jump to implicit chain from set element (Florian Westphal) [2121393]
  - netfilter: nfnetlink: re-enable conntrack expectation events (Florian Westphal) [2121393]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.6.1.el9_1]
changelog:
  - kabi: add symbol yield to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol xa_find_after to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol xa_find to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol xa_destroy to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol x86_spec_ctrl_base to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol x86_cpu_to_apicid to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol wait_for_completion_interruptible to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol wait_for_completion to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol vsprintf to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol vsnprintf to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol vprintk to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol vmemmap_base to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol vmalloc_base to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol vmalloc to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol vm_zone_stat to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol vm_event_states to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol vfree to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol uv_undefined to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol uv_teardown_irq to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol uv_setup_irq to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol uv_possible_blades to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol uv_get_hubless_system to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol uv_bios_obj_count to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol uv_bios_install_heap to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol uv_bios_get_pci_topology to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol uv_bios_get_master_nasid to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol uv_bios_get_heapsize to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol uv_bios_get_geoinfo to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol uv_bios_enum_ports to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol uv_bios_enum_objs to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol up_write to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol up_read to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol up to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol unregister_reboot_notifier to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol unregister_nmi_handler to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol unregister_netdevice_notifier to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol unregister_chrdev_region to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol unregister_blkdev to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol tsc_khz to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol try_wait_for_completion to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol touch_softlockup_watchdog to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol time64_to_tm to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol this_cpu_off to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol tasklet_unlock_wait to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol tasklet_kill to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol tasklet_init to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol system_wq to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol system_freezing_cnt to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol sys_tz to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol synchronize_rcu to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol strstr to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol strsep to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol strrchr to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol strnlen to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol strncpy_from_user to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol strncpy to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol strncmp to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol strncasecmp to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol strlen to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol strlcpy to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol strlcat to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol strcpy to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol strcmp to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol strchr to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol sscanf to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol sprintf to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol sort to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol snprintf to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol sn_region_size to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol sn_partition_id to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol smp_call_function_single_async to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol smp_call_function_single to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol smp_call_function_many to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol sme_me_mask to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol simple_strtoull to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol simple_strtoul to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol simple_strtol to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol simple_read_from_buffer to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol set_freezable to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol set_current_groups to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol security_sb_eat_lsm_opts to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol security_free_mnt_opts to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol scsi_command_size_tbl to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol scnprintf to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol schedule_timeout to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol schedule to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol rtnl_is_locked to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol revert_creds to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol request_threaded_irq to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol remove_wait_queue to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol register_reboot_notifier to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol register_netdevice_notifier to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol register_chrdev_region to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol refcount_warn_saturate to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol recalc_sigpending to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol rcu_read_unlock_strict to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol rb_next to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol rb_first to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol radix_tree_delete to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol queue_work_on to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol queue_delayed_work_on to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol put_unused_fd to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol ptrs_per_p4d to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol printk to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol prepare_to_wait_exclusive to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol prepare_to_wait_event to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol prepare_to_wait to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol prepare_creds to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol posix_acl_valid to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol posix_acl_to_xattr to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol posix_acl_from_xattr to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol posix_acl_alloc to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol physical_mask to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol phys_base to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol pgdir_shift to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol percpu_ref_init to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol percpu_ref_exit to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol panic_notifier_list to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol panic to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol page_offset_base to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol override_creds to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol numa_node to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol nr_cpu_ids to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol node_states to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol mutex_unlock to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol mutex_trylock to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol mutex_lock to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol mutex_is_locked to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol msleep to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol memset to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol mempool_free_slab to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol mempool_free to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol mempool_destroy to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol mempool_create_node to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol mempool_create to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol mempool_alloc_slab to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol mempool_alloc to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol memparse to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol memory_read_from_buffer to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol memmove to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol memcpy to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol memcmp to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol mem_section to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol mds_idle_clear to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol lookup_bdev to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol ktime_get_ts64 to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol ktime_get_real_ts64 to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol ktime_get_coarse_real_ts64 to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol ktime_get to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol kthread_should_stop to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol kstrtoull to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol kstrtoll to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol kmalloc_order_trace to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol kfree to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol kernel_sigaction to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol kernel_fpu_end to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol kernel_fpu_begin_mask to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol jiffies_64 to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol jiffies to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol is_vmalloc_addr to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol is_uv_system to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol iounmap to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol ioremap to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol iomem_resource to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol init_wait_entry to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol init_timer_key to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol in_group_p to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol in_aton to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol in6_pton to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol in4_pton to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol hrtimer_start_range_ns to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol hrtimer_init to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol hrtimer_forward to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol hrtimer_cancel to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol groups_alloc to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol get_zeroed_page to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol get_unused_fd_flags to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol free_percpu to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol free_pages to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol free_irq to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol fortify_panic to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol flush_workqueue to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol finish_wait to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol elfcorehdr_addr to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol efi to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol dump_stack to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol downgrade_write to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol down_write_trylock to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol down_write to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol down_trylock to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol down_read_trylock to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol down_read to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol down_interruptible to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol down to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol dmi_get_system_info to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol devmap_managed_key to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol dev_base_lock to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol destroy_workqueue to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol delayed_work_timer_fn to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol del_timer_sync to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol default_wake_function to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol csum_partial to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol cpumask_next to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol cpufreq_quick_get to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol cpu_sibling_map to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol cpu_number to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol cpu_khz to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol cpu_info to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol cpu_bit_bitmap to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol congestion_wait to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol complete_and_exit to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol complete to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol commit_creds to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol clear_user to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol capable to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol cancel_delayed_work_sync to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol cancel_delayed_work to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol call_usermodehelper to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol call_rcu to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol cachemode2protval to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol boot_cpu_data to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol blk_stack_limits to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol bitmap_release_region to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol bitmap_find_free_region to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol avenrun to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol autoremove_wake_function to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol atomic_notifier_chain_unregister to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol atomic_notifier_chain_register to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol async_synchronize_full_domain to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol async_synchronize_full to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol alloc_workqueue to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol alloc_chrdev_region to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol add_wait_queue_exclusive to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol add_wait_queue to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol add_timer to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol abort_creds to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _totalram_pages to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _raw_write_unlock_irqrestore to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _raw_write_unlock_bh to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _raw_write_lock_irqsave to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _raw_write_lock_bh to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _raw_spin_unlock_irqrestore to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _raw_spin_unlock_irq to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _raw_spin_unlock_bh to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _raw_spin_unlock to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _raw_spin_trylock_bh to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _raw_spin_trylock to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _raw_spin_lock_irqsave to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _raw_spin_lock_irq to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _raw_spin_lock_bh to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _raw_spin_lock to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _raw_read_unlock_irqrestore to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _raw_read_unlock_bh to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _raw_read_lock_irqsave to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _raw_read_lock_bh to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _find_next_bit to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _find_first_zero_bit to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _find_first_bit to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _ctype to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _copy_to_user to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _copy_from_user to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __xa_insert to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __x86_indirect_thunk_rsi to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __x86_indirect_thunk_rdx to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __x86_indirect_thunk_rdi to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __x86_indirect_thunk_rcx to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __x86_indirect_thunk_rbx to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __x86_indirect_thunk_rbp to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __x86_indirect_thunk_rax to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __x86_indirect_thunk_r8 to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __x86_indirect_thunk_r15 to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __x86_indirect_thunk_r14 to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __x86_indirect_thunk_r13 to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __x86_indirect_thunk_r12 to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __x86_indirect_thunk_r10 to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __warn_printk to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __wake_up to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __vmalloc to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __uv_hub_info_list to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __uv_cpu_info to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __unregister_chrdev to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __udelay to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __tasklet_schedule to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __sw_hweight64 to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __sw_hweight32 to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __stack_chk_fail to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __request_region to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __release_region to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __register_nmi_handler to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __register_blkdev to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __refrigerator to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __rcu_read_unlock to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __rcu_read_lock to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __put_user_8 to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __put_user_4 to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __put_user_2 to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __put_cred to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __preempt_count to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __per_cpu_offset to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __num_online_cpus to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __node_distance to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __ndelay to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __mutex_init to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __msecs_to_jiffies to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __list_del_entry_valid to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __list_add_valid to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __kmalloc to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __init_waitqueue_head to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __init_swait_queue_head to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __init_rwsem to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __hw_addr_init to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __get_user_2 to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __get_free_pages to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __fentry__ to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __cpu_possible_mask to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __cpu_online_mask to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __const_udelay to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __cond_resched to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __check_object_size to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __bitmap_weight to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __bitmap_intersects to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __bitmap_equal to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __bitmap_and to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __alloc_percpu to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __SCT__preempt_schedule to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __SCT__might_resched to stablelist (Čestmír Kalina) [2120286]
  - kabi: re-enable build-time kabi-checks (Čestmír Kalina) [2120321]
  - sfc: fix null pointer dereference in efx_hard_start_xmit (Íñigo Huguet) [2129287]
  - sfc: fix TX channel offset when using legacy interrupts (Íñigo Huguet) [2129287]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.7.1.el9_1]
changelog:
  - i2c: ismt: prevent memory corruption in ismt_access() (David Arcari) [2127532 2125582] {CVE-2022-3077}
  - x86/fpu: Prevent FPU state corruption (Oleksandr Natalenko) [2134588 2131667]
  - iavf: Fix reset error handling (Petr Oros) [2127884 2119712]
  - iavf: Fix NULL pointer dereference in iavf_get_link_ksettings (Petr Oros) [2127884 2119712]
  - iavf: Fix missing state logs (Petr Oros) [2127884 2119712]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.8.1.el9_1]
changelog:
  - redhat: fix the branch we pull from the documentation tree (Herton R. Krzesinski)
  - nvme-tcp: handle number of queue changes (John Meneghini) [2131359 2112025]
  - nvmet: expose max queues to configfs (John Meneghini) [2131359 2112025]
  - nvme-fabrics: parse nvme connect Linux error codes (John Meneghini) [2131359 2112025]
  - vfio/type1: Unpin zero pages (Alex Williamson) [2128514 2121855]
  - ptrace: Check PTRACE_O_SUSPEND_SECCOMP permission on PTRACE_SEIZE (Oleg Nesterov) [2127881 2121271] {CVE-2022-30594}


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.9.1.el9_1]
changelog:
  - CI: Remove deprecated variable (Veronika Kabatova)
  - drm: fix duplicated code in drm_connector_register (Karol Herbst) [2134619 2132575]
  - drm/mgag200: Fix PLL setup for G200_SE_A rev >=4 (Jocelyn Falempe) [2140153 1960467]
  - scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139213 2136223]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.10.1.el9_1]
changelog:
  - ice: Fix crash by keep old cfg when update TCs more than queues (Petr Oros) [2132070 2131953]
  - ice: Fix tunnel checksum offload with fragmented traffic (Petr Oros) [2132070 2131953]
  - ice: handle E822 generic device ID in PLDM header (Petr Oros) [2132070 2131953]
  - ice: ethtool: Prohibit improper channel config for DCB (Petr Oros) [2132070 2131953]
  - ice: ethtool: advertise 1000M speeds properly (Petr Oros) [2132070 2131953]
  - ice: Fix switchdev rules book keeping (Petr Oros) [2132070 2131953]
  - ice: fix access-beyond-end in the switch code (Petr Oros) [2132070 2131953]
  - eth: ice: silence the GCC 12 array-bounds warning (Petr Oros) [2132070 2131953]
  - ice: Expose RSS indirection tables for queue groups via ethtool (Petr Oros) [2132070 2131953]
  - Revert "ice: Hide bus-info in ethtool for PRs in switchdev mode" (Petr Oros) [2132070 2131953]
  - ice: remove period on argument description in ice_for_each_vf (Petr Oros) [2132070 2131953]
  - ice: add a function comment for ice_cfg_mac_antispoof (Petr Oros) [2132070 2131953]
  - ice: fix wording in comment for ice_reset_vf (Petr Oros) [2132070 2131953]
  - ice: remove return value comment for ice_reset_all_vfs (Petr Oros) [2132070 2131953]
  - ice: always check VF VSI pointer values (Petr Oros) [2132070 2131953]
  - ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Petr Oros) [2132070 2131953]
  - ice: get switch id on switchdev devices (Petr Oros) [2132070 2131953]
  - ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Petr Oros) [2132070 2131953]
  - ice: introduce common helper for retrieving VSI by vsi_num (Petr Oros) [2132070 2131953]
  - ice: use min_t() to make code cleaner in ice_gnss (Petr Oros) [2132070 2131953]
  - ice, xsk: Avoid refilling single Rx descriptors (Petr Oros) [2132070 2131953]
  - ice, xsk: Diversify return values from xsk_wakeup call paths (Petr Oros) [2132070 2131953]
  - ice, xsk: Terminate Rx side of NAPI when XSK Rx queue gets full (Petr Oros) [2132070 2131953]
  - ice, xsk: Decorate ICE_XDP_REDIR with likely() (Petr Oros) [2132070 2131953]
  - ice: Add mpls+tso support (Petr Oros) [2132070 2131953]
  - ice: switch: convert packet template match code to rodata (Petr Oros) [2132070 2131953]
  - ice: switch: use convenience macros to declare dummy pkt templates (Petr Oros) [2132070 2131953]
  - ice: switch: use a struct to pass packet template params (Petr Oros) [2132070 2131953]
  - ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Petr Oros) [2132070 2131953]
  - ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Petr Oros) [2132070 2131953]
  - ice: Support GTP-U and GTP-C offload in switchdev (Petr Oros) [2132070 2131953]
  - Documentation/admin-guide: Document nomodeset kernel parameter (Karol Herbst) [2145217 2143841]
  - drm: Move nomodeset kernel parameter to the DRM subsystem (Karol Herbst) [2145217 2143841]
  - selftests/bpf: Limit unroll_count for pyperf600 test (Frantisek Hrbata) [2144902 2139836]
  - nvme-fc: fix the fc_appid_store return value (Ewan D. Milne) [2136914 2113035]
  - ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142168 2130652]
  - CI: Drop c9s CI parts (Veronika Kabatova)
  - CI: Use GA builder container (Veronika Kabatova)


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.11.1.el9_1]
changelog:
  - drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148152 2148153] {CVE-2022-4139}
  - memcg: prohibit unconditional exceeding the limit of dying tasks (Chris von Recklinghausen) [2143976 2120352]
  - mm, oom: do not trigger out_of_memory from the #PF (Waiman Long) [2143976 2139747]
  - mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Chris von Recklinghausen) [2143976 2120352]
  - pipe: Fix missing lock in pipe_resize_ring() (Ian Kent) [2141631 2141632] {CVE-2022-2959}
  - net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2142722 2142723] {CVE-2022-2964}
  - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2142722 2142723] {CVE-2022-2964}
  - NFSD: Protect against send buffer overflow in NFSv3 READ (Scott Mayhew) [2141769 2141770] {CVE-2022-43945}
  - NFSD: Protect against send buffer overflow in NFSv2 READ (Scott Mayhew) [2141769 2141770] {CVE-2022-43945}
  - NFSD: Protect against send buffer overflow in NFSv3 READDIR (Scott Mayhew) [2141769 2141770] {CVE-2022-43945}
  - NFSD: Protect against send buffer overflow in NFSv2 READDIR (Scott Mayhew) [2141769 2141770] {CVE-2022-43945}
  - SUNRPC: Fix svcxdr_init_encode's buflen calculation (Scott Mayhew) [2141769 2141770] {CVE-2022-43945}
  - SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Scott Mayhew) [2141769 2141770] {CVE-2022-43945}


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.12.1.el9_1]
changelog:
  - x86/fpu: Drop fpregs lock before inheriting FPU permissions (Valentin Schneider) [2154407 2153181]
  - hv_netvsc: Fix race between VF offering and VF association message from host (Mohammed Gamal) [2151605 2149277]
  - PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Emanuele Giuseppe Esposito) [2150910 2092794]


author: John Mcwalters <john.mcwalters@oracle.com> [5.14.0-162.12.1.el9_1.OL9]
changelog:
  - Update Oracle Linux certificates (Kevin Lyons)
  - Disable signing for aarch64 (Ilya Okomin)
  - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
  - Update x509.genkey [Orabug: 24817676]
  - Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5.el9
  - Remove nmap references from kernel (Mridula Shastry) [Orabug: 34313944]
  - Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.13.1.el9_1]
changelog:
  - scsi: qla2xxx: Fix crash when I/O abort times out (Nilesh Javali) [2152178 2115892]
  - net: mana: Fix race on per-CQ variable napi work_done (Emanuele Giuseppe Esposito) [2155145 2153431]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.14.1.el9_1]
changelog:
  - NFSD: fix use-after-free in __nfs42_ssc_open() (Benjamin Coddington) [2152815 2152816] {CVE-2022-4379}
  - PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155930 2155277]
  - PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155930 2155277]
  - PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155930 2155277]
  - sched/core: Always flush pending blk_plug (Phil Auld) [2153792 2115520]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.15.1.el9_1]
changelog:
  - KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158815 2140899]
  - x86/fpu: Do not leak fpstate pointer on fork (Rafael Aquini) [2133083 2120448]
  - Revert "usb: typec: ucsi: add a common function ucsi_unregister_connectors()" (Torez Smith) [2153277 2113003]
  - i2c: ismt: Fix an out-of-bounds bug in ismt_access() (David Arcari) [2154859 2119067] {CVE-2022-2873}


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.16.1.el9_1]
changelog:
  - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Ricardo Robaina) [2152929 2152931] {CVE-2022-3564}
  - gitlab-ci: use CI templates from production branch (Michael Hofmann)


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.17.1.el9_1]
changelog:
  - PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155459 2100404]
  - PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155459 2100404]
  - PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155459 2100404]
  - PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155459 2100404]
  - PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155459 2100404]
  - PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155459 2100404]
  - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152580 2152581] {CVE-2022-4378}
  - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152580 2152581] {CVE-2022-4378}
  - blk-mq: run queue no matter whether the request is the last request (Ming Lei) [2162535 2118511]
  - netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits (Florian Westphal) [2161724 2161725] {CVE-2023-0179}
  - nvme-tcp: fix regression that causes sporadic requests to time out (Gopal Tiwari) [2161344 2124526]
  - netfs: Fix dodgy maths (Xiubo Li) [2161418 2138981]
  - netfs: Fix missing xas_retry() calls in xarray iteration (Xiubo Li) [2161418 2138981]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.18.1.el9_1]
changelog:
  - powerpc/pseries: Use lparcfg to reconfig VAS windows for DLPAR CPU (Steve Best) [2154305 2133101]
  - redhat/configs: Change the amd-pstate driver from builtin to loadable (David Arcari) [2151274 2143793]
  - powerpc/pseries/mobility: set NMI watchdog factor during an LPM (Steve Best) [2140085 2122830]
  - powerpc/watchdog: introduce a NMI watchdog's factor (Steve Best) [2140085 2122830]
  - watchdog: export lockup_detector_reconfigure (Steve Best) [2140085 2122830]
  - powerpc/mobility: wait for memory transfer to complete (Steve Best) [2140085 2122830]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.19.1.el9_1]
changelog:
  - sched/core: Use kfree_rcu() in do_set_cpus_allowed() (Waiman Long) [2160614 2143847]
  - sched/core: Fix use-after-free bug in dup_user_cpus_ptr() (Waiman Long) [2160614 2143847]
  - sched: Always clear user_cpus_ptr in do_set_cpus_allowed() (Waiman Long) [2143766 2107354]
  - sched: Enforce user requested affinity (Waiman Long) [2143766 2107354]
  - sched: Always preserve the user requested cpumask (Waiman Long) [2143766 2107354]
  - sched: Introduce affinity_context (Waiman Long) [2143766 2107354]
  - sched: Add __releases annotations to affine_move_task() (Waiman Long) [2143766 2107354]
  - x86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly (Dean Nelson) [2168382 2122851]
  - x86/fpu: Exclude dynamic states from init_fpstate (Dean Nelson) [2168382 2122851]
  - x86/fpu: Fix the init_fpstate size check with the actual size (Dean Nelson) [2168382 2122851]
  - x86/fpu: Configure init_fpstate attributes orderly (Dean Nelson) [2168382 2122851]
  - x86/fpu/xstate: Fix the ARCH_REQ_XCOMP_PERM implementation (Dean Nelson) [2168382 2122851]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.20.1.el9_1]
changelog:
  - cgroup/cpuset: remove unreachable code (Waiman Long) [2161105 1946801]
  - kselftest/cgroup: Add cpuset v2 partition root state test (Waiman Long) [2161105 1946801]
  - cgroup/cpuset: Update description of cpuset.cpus.partition in cgroup-v2.rst (Waiman Long) [2161105 1946801]
  - cgroup/cpuset: Make partition invalid if cpumask change violates exclusivity rule (Waiman Long) [2161105 1946801]
  - cgroup/cpuset: Relocate a code block in validate_change() (Waiman Long) [2161105 1946801]
  - cgroup/cpuset: Show invalid partition reason string (Waiman Long) [2161105 1946801]
  - cgroup/cpuset: Add a new isolated cpus.partition type (Waiman Long) [2161105 1946801]
  - cgroup/cpuset: Relax constraints to partition & cpus changes (Waiman Long) [2161105 1946801]
  - cgroup/cpuset: Allow no-task partition to have empty cpuset.cpus.effective (Waiman Long) [2161105 1946801]
  - cgroup/cpuset: Miscellaneous cleanups & add helper functions (Waiman Long) [2161105 1946801]
  - cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset (Waiman Long) [2161105 1946801]
  - cpuset: convert 'allowed' in __cpuset_node_allowed() to be boolean (Waiman Long) [2161105 1946801]
  - cgroup/cpuset: Remove cpus_allowed/mems_allowed setup in cpuset_init_smp() (Waiman Long) [2161105 1946801]
  - cgroup: cleanup comments (Waiman Long) [2161105 1946801]
  - act_mirred: use the backlog for nested calls to mirred ingress (Davide Caratti) [2164655 2150278] {CVE-2022-4269}
  - net/sched: act_mirred: better wording on protection against excessive stack growth (Davide Caratti) [2164655 2150278] {CVE-2022-4269}
  - scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM (Emanuele Giuseppe Esposito) [2170227 2150660]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.21.1.el9_1]
changelog:
  - s390/boot: add secure boot trailer (Tobias Huschle) [2151528 2141966]
  - s390/kexec: fix ipl report address for kdump (Tobias Huschle) [2166903 2161327]
  - s390/qeth: cache link_info for ethtool (Tobias Huschle) [2166304 2110436]
  - scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127880 2121088]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.22.1.el9_1]
changelog:
  - ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (Jaroslav Kysela) [2163390 2125540] {CVE-2023-0266}


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.23.1.el9_1]
changelog:
  - ovl: fail on invalid uid/gid mapping at copy up (Miklos Szeredi) [2165344 2165345] {CVE-2023-0386}
  - intel_idle: make SPR C1 and C1E be independent (David Arcari) [2168361 2125352]
  - intel_idle: Add a new flag to initialize the AMX state (David Arcari) [2168361 2117766]
  - x86/fpu: Add a helper to prepare AMX state for low-power CPU idle (David Arcari) [2168361 2117766]
  - x86/insn: Add AMX instructions to the x86 instruction decoder (Michael Petlan) [2168361 2140492]
  - futex: Resend potentially swallowed owner death notification (Rafael Aquini) [2168836 2161817]
  - tun: avoid double free in tun_free_netdev (Jon Maloy) [2156373 2156374] {CVE-2022-4744}


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-160.el9]
changelog:
  - iavf: Fix VLAN_V2 addition/rejection (Ivan Vecera) [2119701]
  - gve: Recording rx queue before sending to napi (Jordan Kimbrough) [2022916]
  - gve: fix the wrong AdminQ buffer queue index check (Jordan Kimbrough) [2022916]
  - gve: Fix GFP flags when allocing pages (Jordan Kimbrough) [2022916]
  - gve: Add tx|rx-coalesce-usec for DQO (Jordan Kimbrough) [2022916]
  - gve: Add consumed counts to ethtool stats (Jordan Kimbrough) [2022916]
  - gve: Implement suspend/resume/shutdown (Jordan Kimbrough) [2022916]
  - gve: Add optional metadata descriptor type GVE_TXD_MTD (Jordan Kimbrough) [2022916]
  - gve: remove memory barrier around seqno (Jordan Kimbrough) [2022916]
  - gve: Update gve_free_queue_page_list signature (Jordan Kimbrough) [2022916]
  - gve: Move the irq db indexes out of the ntfy block struct (Jordan Kimbrough) [2022916]
  - gve: Correct order of processing device options (Jordan Kimbrough) [2022916]
  - gve: fix for null pointer dereference. (Jordan Kimbrough) [2022916]
  - gve: fix unmatched u64_stats_update_end() (Jordan Kimbrough) [2022916]
  - gve: Fix off by one in gve_tx_timeout() (Jordan Kimbrough) [2022916]
  - gve: Add a jumbo-frame device option. (Jordan Kimbrough) [2022916]
  - gve: Implement packet continuation for RX. (Jordan Kimbrough) [2022916]
  - gve: Add RX context. (Jordan Kimbrough) [2022916]
  - gve: Track RX buffer allocation failures (Jordan Kimbrough) [2022916]
  - gve: Allow pageflips on larger pages (Jordan Kimbrough) [2022916]
  - gve: Add netif_set_xps_queue call (Jordan Kimbrough) [2022916]
  - gve: Recover from queue stall due to missed IRQ (Jordan Kimbrough) [2022916]
  - gve: Do lazy cleanup in TX path (Jordan Kimbrough) [2022916]
  - gve: Add rx buffer pagecnt bias (Jordan Kimbrough) [2022916]
  - gve: Switch to use napi_complete_done (Jordan Kimbrough) [2022916]
  - gve: report 64bit tx_bytes counter from gve_handle_report_stats() (Jordan Kimbrough) [2022916]
  - gve: fix gve_get_stats() (Jordan Kimbrough) [2022916]
  - gve: Properly handle errors in gve_assign_qpl (Jordan Kimbrough) [2022916]
  - gve: Avoid freeing NULL pointer (Jordan Kimbrough) [2022916]
  - gve: Correct available tx qpl check (Jordan Kimbrough) [2022916]
  - gve: Use kvcalloc() instead of kvzalloc() (Jordan Kimbrough) [2022916]
  - gve: DQO: avoid unused variable warnings (Jordan Kimbrough) [2022916]
  - gve: fix the wrong AdminQ buffer overflow check (Jordan Kimbrough) [2022916]
  - ath9k: htc: clean up statistics macros (Jose Ignacio Tornos Martinez) [2084600] {CVE-2022-1679}
  - ath9k: hif_usb: simplify if-if to if-else (Jose Ignacio Tornos Martinez) [2084600] {CVE-2022-1679}
  - ath9k: fix use-after-free in ath9k_hif_usb_rx_cb (Jose Ignacio Tornos Martinez) [2084600] {CVE-2022-1679}
  - net: qcom/emac: Fix improper merge resolution in device_get_mac_address (Patrick Talbert) [2108539]
  - x86/speculation: Add LFENCE to RSB fill sequence (Waiman Long) [2115086] {CVE-2022-26373}
  - x86/speculation: Add RSB VM Exit protections (Waiman Long) [2115086] {CVE-2022-26373}
  - tools headers cpufeatures: Sync with the kernel sources (Waiman Long) [2115086]
  - x86/bugs: Do not enable IBPB at firmware entry when IBPB is not available (Waiman Long) [2115086]
  - lkdtm: Disable return thunks in rodata.c (Waiman Long) [2115086]
  - x86/amd: Use IBPB for firmware calls (Waiman Long) [2115086]
  - x86/bugs: Warn when "ibrs" mitigation is selected on Enhanced IBRS parts (Waiman Long) [2115086]
  - x86/alternative: Report missing return thunk details (Waiman Long) [2115086]
  - nvme-fc: restart admin queue if the caller needs to restart queue (Ewan D. Milne) [2104461]
  - scsi: csiostor: Uninitialized data in csio_ln_vnp_read_cbfn() (Rahul Lakkireddy) [2109526]
  - scsi: csiostor: Use scsi_cmd_to_rq() instead of scsi_cmnd.request (Rahul Lakkireddy) [2109526]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-161.el9]
changelog:
  - x86/ftrace: Use alternative RET encoding (Joe Lawrence) [2121368]
  - x86/ibt,ftrace: Make function-graph play nice (Joe Lawrence) [2121368]
  - x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch() (Joe Lawrence) [2121368]
  - x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR (Joe Lawrence) [2121368]
  - redhat: remove GL_DISTGIT_USER, RHDISTGIT and unify dist-git cloning (Frantisek Hrbata)
  - random: allow reseeding DRBG with getrandom (Daiki Ueno) [2114854]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.el9]
changelog:
  - Revert "ixgbevf: Mailbox improvements" (Ken Cox) [2120548]
  - Revert "ixgbevf: Add support for new mailbox communication between PF and VF" (Ken Cox) [2120548]
  - posix-cpu-timers: Cleanup CPU timers before freeing them during exec (Wander Lairson Costa) [2116968] {CVE-2022-2585}
  - fix race between exit_itimers() and /proc/pid/timers (Wander Lairson Costa) [2116968] {CVE-2022-2585}


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.1.1.el9]
changelog:
  - drm/amdgpu: Only disable prefer_shadow on hawaii (Lyude Paul) [2120670]
  - i40e: Fix kernel crash during module removal (Ivan Vecera) [2070375]
  - Revert "net: macsec: update SCI upon MAC address change." (Sabrina Dubroca) [2118139]
  - redhat: enable zstream release numbering for rhel 9.1 (Patrick Talbert)
  - redhat: add missing CVE reference to latest changelog entries (Patrick Talbert)


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.2.1.el9]
changelog:
  - ixgbe: Add locking to prevent panic when setting sriov_numvfs to zero (Ken Cox) [2109871]
  - drm/hyperv : Removing the restruction of VRAM allocation with PCI bar size (Vitaly Kuznetsov) [2030922]
  - drm/nouveau/kms/nv140-: Disable interlacing (Lyude Paul) [2122068]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.3.1.el9]
changelog:
  - scsi: restore setting of scmd->scsi_done() in EH and reset ioctl paths (Ewan D. Milne) [2120469]
  - x86/boot: Don't propagate uninitialized boot_params->cc_blob_address (Terry Bowman) [2124644]
  - ice: Allow operation with reduced device MSI-X (Petr Oros) [2107719]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-284.3.1.el9_2]
changelog:
  - cpufreq: ACPI: Remove unused variables 'acpi_cpufreq_online' and 'ret' (Mark Langsdorf) [2170475]
  - cpufreq: ACPI: Only set boost MSRs on supported CPUs (Mark Langsdorf) [2170475]
  - Drivers: vmbus: Check for channel allocation before looking up relids (Mohammed Gamal) [2156126]
  - NFSD: copy the whole verifier in nfsd_copy_write_verifier (Jeffrey Layton) [2166658]
  - nfsd: don't fsync nfsd_files on last close (Jeffrey Layton) [2166658]
  - NFSD: fix problems with cleanup on errors in nfsd4_copy (Jeffrey Layton) [2166658]
  - nfsd: fix race to check ls_layouts (Jeffrey Layton) [2166658]
  - nfsd: don't hand out delegation on setuid files being opened for write (Jeffrey Layton) [2127406]
  - nfsd: remove fs/nfsd/fault_inject.c (Jeffrey Layton) [2166658]
  - NFSD: fix leaked reference count of nfsd4_ssc_umount_item (Jeffrey Layton) [2166658]
  - nfsd: clean up potential nfsd_file refcount leaks in COPY codepath (Jeffrey Layton) [2166658]
  - nfsd: zero out pointers after putting nfsd_files on COPY setup error (Jeffrey Layton) [2166658]
  - nfsd: eliminate __nfs4_get_fd (Jeffrey Layton) [2166658]
  - nfsd: add some kerneldoc comments for stateid preprocessing functions (Jeffrey Layton) [2166658]
  - nfsd: eliminate find_deleg_file_locked (Jeffrey Layton) [2166658]
  - nfsd: don't take nfsd4_copy ref for OP_OFFLOAD_STATUS (Jeffrey Layton) [2166658]
  - nfsd: move reply cache initialization into nfsd startup (Jeffrey Layton) [2166658]
  - nfsd: fix potential race in nfs4_find_file (Jeffrey Layton) [1997177]
  - nfsd: allow nfsd_file_get to sanely handle a NULL pointer (Jeffrey Layton) [2166658]
  - NFSD: enhance inter-server copy cleanup (Jeffrey Layton) [2166658]
  - NFSD: Rename the fields in copy_stateid_t (Jeffrey Layton) [2166658]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-284.4.1.el9_2]
changelog:
  - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [2109548]
  - Revert "GFS2: free disk inode which is deleted by remote node -V2" (Bob Peterson) [2109548]
  - gfs2: Evict inodes cooperatively (Andreas Gruenbacher) [2109548]
  - gfs2: Flush delete work before shrinking inode cache (Andreas Gruenbacher) [2109548]
  - gfs2: Cease delete work during unmount (Bob Peterson) [2109548]
  - gfs2: Add SDF_DEACTIVATING super block flag (Bob Peterson) [2109548]
  - gfs2: check gl_object in rgrp glops (Bob Peterson) [2109548]
  - gfs2: Split the two kinds of glock "delete" work (Andreas Gruenbacher) [2109548]
  - gfs2: Move delete workqueue into super block (Andreas Gruenbacher) [2109548]
  - gfs2: Get rid of GLF_PENDING_DELETE flag (Andreas Gruenbacher) [2109548]
  - gfs2: Make glock lru list scanning safer (Andreas Gruenbacher) [2109548]
  - gfs2: Clean up gfs2_scan_glock_lru (Andreas Gruenbacher) [2109548]
  - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [2109548]
  - gfs2: gl_object races fix (Andreas Gruenbacher) [2109548]
  - iomap/gfs2: Unlock and put folio in page_done handler (Andreas Gruenbacher) [2109548]
  - iomap: Add __iomap_put_folio helper (Andreas Gruenbacher) [2109548]
  - Revert "gfs2: stop using generic_writepages in gfs2_ail1_start_one" (Andreas Gruenbacher) [2109548]
  - gfs2: Remove support for glock holder auto-demotion (2) (Andreas Gruenbacher) [2109548]
  - gfs2: Remove support for glock holder auto-demotion (Andreas Gruenbacher) [2109548]
  - gfs2: Minor gfs2_try_evict cleanup (Andreas Gruenbacher) [2109548]
  - gfs2: Partially revert gfs2_inode_lookup change (Andreas Gruenbacher) [2109548]
  - gfs2: Add gfs2_inode_lookup comment (Andreas Gruenbacher) [2109548]
  - gfs2: Uninline and improve glock_{set,clear}_object (Andreas Gruenbacher) [2109548]
  - gfs2: Simply dequeue iopen glock in gfs2_evict_inode (Andreas Gruenbacher) [2109548]
  - gfs2: Clean up after gfs2_create_inode rework (Andreas Gruenbacher) [2109548]
  - gfs2: Avoid dequeuing GL_ASYNC glock holders twice (Andreas Gruenbacher) [2109548]
  - gfs2: Make gfs2_glock_hold return its glock argument (Andreas Gruenbacher) [2109548]
  - gfs2: Always check inode size of inline inodes (Andreas Gruenbacher) [2109548]
  - gfs2: Cosmetic gfs2_dinode_{in,out} cleanup (Andreas Gruenbacher) [2109548]
  - gfs2: Handle -EBUSY result of insert_inode_locked4 (Andreas Gruenbacher) [2109548]
  - gfs2: Fix and clean up create / evict interaction (Andreas Gruenbacher) [2109548]
  - gfs2: Clean up initialization of "ip" in gfs2_create_inode (Andreas Gruenbacher) [2109548]
  - gfs2: Get rid of ghs[] in gfs2_create_inode (Andreas Gruenbacher) [2109548]
  - gfs2: Add extra error check in alloc_dinode (Andreas Gruenbacher) [2109548]
  - gfs2: Check sb_bsize_shift after reading superblock (Andrew Price) [2109548]
  - gfs2: Switch from strlcpy to strscpy (Andreas Gruenbacher) [2109548]
  - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [2109548]
  - gfs2: Dequeue waiters when withdrawn (Bob Peterson) [2109548]
  - gfs2: Prevent double iput for journal on error (Bob Peterson) [2109548]
  - gfs2: Convert gfs2_jhead_process_page() to use a folio (Andreas Gruenbacher) [2109548]
  - gfs2: remove ->writepage (Andreas Gruenbacher) [2109548]
  - gfs2: stop using generic_writepages in gfs2_ail1_start_one (Andreas Gruenbacher) [2109548]
  - gfs2: List traversal in do_promote is safe (Andreas Gruenbacher) [2109548]
  - gfs2: do_promote glock holder stealing fix (Bob Peterson) [2109548]
  - gfs2: Use better variable name (Andreas Gruenbacher) [2109548]
  - gfs2: Make go_instantiate take a glock (Andreas Gruenbacher) [2109548]
  - gfs2: Add new go_held glock operation (Andreas Gruenbacher) [2109548]
  - gfs2: Revert 'Fix "truncate in progress" hang' (Andreas Gruenbacher) [2109548]
  - gfs2: Instantiate glocks ouside of glock state engine (Andreas Gruenbacher) [2109548]
  - gfs2: Fix up gfs2_glock_async_wait (Andreas Gruenbacher) [2109548]
  - gfs2: Mark the remaining process-independent glock holders as GL_NOPID (Andreas Gruenbacher) [2109548]
  - gfs2: Mark flock glock holders as GL_NOPID (Andreas Gruenbacher) [2109548]
  - gfs2: Add GL_NOPID flag for process-independent glock holders (Andreas Gruenbacher) [2109548]
  - gfs2: Add flocks to glockfd debugfs file (Andreas Gruenbacher) [2109548]
  - gfs2: Add glockfd debugfs file (Andreas Gruenbacher) [2109548]
  - gfs2: Minor gfs2_glock_nq_m cleanup (Andreas Gruenbacher) [2109548]
  - gfs2: Fix spelling mistake in comment (Andreas Gruenbacher) [2109548]
  - gfs2: Rewrap overlong comment in do_promote (Bob Peterson) [2109548]
  - gfs2: Remove redundant NULL check before kfree (Andreas Gruenbacher) [2109548]
  - gfs2: Use container_of() for gfs2_glock(aspace) (Andreas Gruenbacher) [2109548]
  - gfs2: dump inode object for iopen glocks (Bob Peterson) [2109548]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-284.5.1.el9_2]
changelog:
  - redhat: fix trivial syntax error in 64k-debug modules signing (Herton R. Krzesinski)
  - redhat/configs: Revert "enable DAMON configs" (Vladis Dronov)
  - block: bio-integrity: Copy flags when bio_integrity_payload is cloned (Ming Lei) [2164903]
  - afs: remove afs_cache_netfs and afs_zap_permits() declarations (Marc Dionne) [2166628]
  - afs: remove variable nr_servers (Marc Dionne) [2166628]
  - afs: Fix lost servers_outstanding count (Marc Dionne) [2166628]
  - afs: Fix server->active leak in afs_put_server (Marc Dionne) [2166628]
  - afs: Fix fileserver probe RTT handling (Marc Dionne) [2166628]
  - afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked (Marc Dionne) [2166628]
  - afs: Use the operation issue time instead of the reply time for callbacks (Marc Dionne) [2166628]
  - afs: Enable multipage folio support (Marc Dionne) [2166628]
  - afs: Fix access after dec in put functions (Marc Dionne) [2166628]
  - afs: Use refcount_t rather than atomic_t (Marc Dionne) [2166628]
  - afs: Fix dynamic root getattr (Marc Dionne) [2166628]
  - afs: Remove check of PageError (Marc Dionne) [2166628]
  - afs: Fix some checker issues (Marc Dionne) [2166628]
  - afs: Fix infinite loop found by xfstest generic/676 (Marc Dionne) [2166628]
  - afs: Adjust ACK interpretation to try and cope with NAT (Marc Dionne) [2166628]
  - afs: Prefer struct_size over open coded arithmetic (Marc Dionne) [2166628]
  - afs: Convert invalidatepage to invalidate_folio (Marc Dionne) [2166628]
  - afs: Convert directory aops to invalidate_folio (Marc Dionne) [2166628]
  - blk-mq: fix "bad unlock balance detected" on q->srcu in __blk_mq_run_dispatch_ops (Chris Leech) [2170101]
  - KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS (Jon Maloy) [2160029] {CVE-2022-2196}
  - ice: fix lost multicast packets in promisc mode (Petr Oros) [2170694]
  - net: use indirect calls helpers for sk_exit_memory_pressure() (Florian Westphal) [2155182]
  - bpf: pull before calling skb_postpull_rcsum() (Felix Maurer) [2164806]
  - bpf, sockmap: fix race in sock_map_free() (Felix Maurer) [2164806]
  - bpf, sock_map: Move cancel_work_sync() out of sock lock (Felix Maurer) [2164806]
  - xsk: Inherit need_wakeup flag for shared sockets (Felix Maurer) [2164806]
  - xsk: Fix backpressure mechanism on Tx (Felix Maurer) [2164806]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-284.6.1.el9_2]
changelog:
  - NFS: Correct timing for assigning access cache timestamp (Benjamin Coddington) [2180882]
  - nfsd: don't replace page in rq_pages if it's a continuation of last page (Jeffrey Layton) [2179342]
  - tun: avoid double free in tun_free_netdev (Jon Maloy) [2156374] {CVE-2022-4744}


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-284.7.1.el9_2]
changelog:
  - rxrpc: Fix wrong error return in rxrpc_connect_call() (Marc Dionne) [2170099]
  - rxrpc: Fix incoming call setup race (Marc Dionne) [2170099]
  - rxrpc: Move client call connection to the I/O thread (Marc Dionne) [2170099]
  - rxrpc: Move the client conn cache management to the I/O thread (Marc Dionne) [2170099]
  - rxrpc: Remove call->state_lock (Marc Dionne) [2170099]
  - rxrpc: Move call state changes from recvmsg to I/O thread (Marc Dionne) [2170099]
  - rxrpc: Move call state changes from sendmsg to I/O thread (Marc Dionne) [2170099]
  - rxrpc: Wrap accesses to get call state to put the barrier in one place (Marc Dionne) [2170099]
  - rxrpc: Split out the call state changing functions into their own file (Marc Dionne) [2170099]
  - rxrpc: Set up a connection bundle from a call, not rxrpc_conn_parameters (Marc Dionne) [2170099]
  - rxrpc: Offload the completion of service conn security to the I/O thread (Marc Dionne) [2170099]
  - rxrpc: Make the set of connection IDs per local endpoint (Marc Dionne) [2170099]
  - rxrpc: Tidy up abort generation infrastructure (Marc Dionne) [2170099]
  - rxrpc: Clean up connection abort (Marc Dionne) [2170099]
  - rxrpc: Implement a mechanism to send an event notification to a connection (Marc Dionne) [2170099]
  - rxrpc: Only disconnect calls in the I/O thread (Marc Dionne) [2170099]
  - rxrpc: Only set/transmit aborts in the I/O thread (Marc Dionne) [2170099]
  - rxrpc: Separate call retransmission from other conn events (Marc Dionne) [2170099]
  - rxrpc: Make the local endpoint hold a ref on a connected call (Marc Dionne) [2170099]
  - rxrpc: Stash the network namespace pointer in rxrpc_local (Marc Dionne) [2170099]
  - rxrpc: Fix a couple of potential use-after-frees (Marc Dionne) [2170099]
  - rxrpc: Fix the return value of rxrpc_new_incoming_call() (Marc Dionne) [2170099]
  - rxrpc: rxperf: Fix uninitialised variable (Marc Dionne) [2170099]
  - rxrpc: Fix I/O thread stop (Marc Dionne) [2170099]
  - rxrpc: Fix switched parameters in peer tracing (Marc Dionne) [2170099]
  - rxrpc: Fix locking issues in rxrpc_put_peer_locked() (Marc Dionne) [2170099]
  - rxrpc: Fix I/O thread startup getting skipped (Marc Dionne) [2170099]
  - rxrpc: Fix NULL deref in rxrpc_unuse_local() (Marc Dionne) [2170099]
  - rxrpc: Fix security setting propagation (Marc Dionne) [2170099]
  - rxrpc: Fix missing unlock in rxrpc_do_sendmsg() (Marc Dionne) [2170099]
  - rxrpc: Transmit ACKs at the point of generation (Marc Dionne) [2170099]
  - rxrpc: Fold __rxrpc_unuse_local() into rxrpc_unuse_local() (Marc Dionne) [2170099]
  - rxrpc: Move the cwnd degradation after transmitting packets (Marc Dionne) [2170099]
  - rxrpc: Trace/count transmission underflows and cwnd resets (Marc Dionne) [2170099]
  - rxrpc: Remove the _bh annotation from all the spinlocks (Marc Dionne) [2170099]
  - rxrpc: Make the I/O thread take over the call and local processor work (Marc Dionne) [2170099]
  - rxrpc: Extract the peer address from an incoming packet earlier (Marc Dionne) [2170099]
  - rxrpc: Reduce the use of RCU in packet input (Marc Dionne) [2170099]
  - rxrpc: Simplify skbuff accounting in receive path (Marc Dionne) [2170099]
  - rxrpc: Remove RCU from peer->error_targets list (Marc Dionne) [2170099]
  - rxrpc: Move DATA transmission into call processor work item (Marc Dionne) [2170099]
  - rxrpc: Copy client call parameters into rxrpc_call earlier (Marc Dionne) [2170099]
  - rxrpc: Implement a mechanism to send an event notification to a call (Marc Dionne) [2170099]
  - rxrpc: Don't use sk->sk_receive_queue.lock to guard socket state changes (Marc Dionne) [2170099]
  - rxrpc: Remove call->input_lock (Marc Dionne) [2170099]
  - rxrpc: Move error processing into the local endpoint I/O thread (Marc Dionne) [2170099]
  - rxrpc: Move packet reception processing into I/O thread (Marc Dionne) [2170099]
  - rxrpc: Create a per-local endpoint receive queue and I/O thread (Marc Dionne) [2170099]
  - rxrpc: Split the receive code (Marc Dionne) [2170099]
  - rxrpc: Don't hold a ref for connection workqueue (Marc Dionne) [2170099]
  - rxrpc: Don't hold a ref for call timer or workqueue (Marc Dionne) [2170099]
  - rxrpc: trace: Don't use __builtin_return_address for sk_buff tracing (Marc Dionne) [2170099]
  - rxrpc: Trace rxrpc_bundle refcount (Marc Dionne) [2170099]
  - rxrpc: trace: Don't use __builtin_return_address for rxrpc_call tracing (Marc Dionne) [2170099]
  - rxrpc: trace: Don't use __builtin_return_address for rxrpc_conn tracing (Marc Dionne) [2170099]
  - rxrpc: trace: Don't use __builtin_return_address for rxrpc_peer tracing (Marc Dionne) [2170099]
  - rxrpc: trace: Don't use __builtin_return_address for rxrpc_local tracing (Marc Dionne) [2170099]
  - rxrpc: Extract the code from a received ABORT packet much earlier (Marc Dionne) [2170099]
  - rxrpc: Drop rxrpc_conn_parameters from rxrpc_connection and rxrpc_bundle (Marc Dionne) [2170099]
  - rxrpc: Remove the [_k]net() debugging macros (Marc Dionne) [2170099]
  - rxrpc: Remove the [k_]proto() debugging macros (Marc Dionne) [2170099]
  - rxrpc: Remove handling of duplicate packets in recvmsg_queue (Marc Dionne) [2170099]
  - rxrpc: Fix call leak (Marc Dionne) [2170099]
  - rxrpc: Enable rxperf test module (Marc Dionne) [2170099]
  - rxrpc: Implement an in-kernel rxperf server for testing purposes (Marc Dionne) [2170099]
  - rxrpc: Fix checker warning (Marc Dionne) [2170099]
  - rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975] (Marc Dionne) [2170099]
  - rxrpc: uninitialized variable in rxrpc_send_ack_packet() (Marc Dionne) [2170099]
  - rxrpc: fix rxkad_verify_response() (Marc Dionne) [2170099]
  - rxrpc: Fix network address validation (Marc Dionne) [2170099]
  - rxrpc: Fix oops from calling udpv6_sendmsg() on AF_INET socket (Marc Dionne) [2170099]
  - rxrpc: Allocate an skcipher each time needed rather than reusing (Marc Dionne) [2170099]
  - rxrpc: Fix congestion management (Marc Dionne) [2170099]
  - rxrpc: Remove the rxtx ring (Marc Dionne) [2170099]
  - rxrpc: Save last ACK's SACK table rather than marking txbufs (Marc Dionne) [2170099]
  - rxrpc: Remove call->lock (Marc Dionne) [2170099]
  - rxrpc: Don't use a ring buffer for call Tx queue (Marc Dionne) [2170099]
  - rxrpc: Get rid of the Rx ring (Marc Dionne) [2170099]
  - rxrpc: Clone received jumbo subpackets and queue separately (Marc Dionne) [2170099]
  - rxrpc: Split the rxrpc_recvmsg tracepoint (Marc Dionne) [2170099]
  - rxrpc: Clean up ACK handling (Marc Dionne) [2170099]
  - rxrpc: Allocate ACK records at proposal and queue for transmission (Marc Dionne) [2170099]
  - rxrpc: Define rxrpc_txbuf struct to carry data to be transmitted (Marc Dionne) [2170099]
  - rxrpc: Remove call->tx_phase (Marc Dionne) [2170099]
  - rxrpc: Remove the flags from the rxrpc_skb tracepoint (Marc Dionne) [2170099]
  - rxrpc: Remove unnecessary header inclusions (Marc Dionne) [2170099]
  - rxrpc: Call udp_sendmsg() directly (Marc Dionne) [2170099]
  - rxrpc: Fix ack.bufferSize to be 0 when generating an ack (Marc Dionne) [2170099]
  - rxrpc: Record stats for why the REQUEST-ACK flag is being set (Marc Dionne) [2170099]
  - rxrpc: Record statistics about ACK types (Marc Dionne) [2170099]
  - rxrpc: Add stats procfile and DATA packet stats (Marc Dionne) [2170099]
  - rxrpc: Track highest acked serial (Marc Dionne) [2170099]
  - rxrpc: Split call timer-expiration from call timer-set tracepoint (Marc Dionne) [2170099]
  - rxrpc: Trace setting of the request-ack flag (Marc Dionne) [2170099]
  - rxrpc: Automatically generate trace tag enums (Marc Dionne) [2170099]
  - rxrpc: remove rxrpc_max_call_lifetime declaration (Marc Dionne) [2170099]
  - rxrpc: Remove rxrpc_get_reply_time() which is no longer used (Marc Dionne) [2170099]
  - rxrpc: Fix calc of resend age (Marc Dionne) [2170099]
  - rxrpc: Fix local destruction being repeated (Marc Dionne) [2170099]
  - rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2() (Marc Dionne) [2170099]
  - rxrpc: Fix locking in rxrpc's sendmsg (Marc Dionne) [2170099]
  - net: rxrpc: fix clang -Wformat warning (Marc Dionne) [2170099]
  - rxrpc: Fix decision on when to generate an IDLE ACK (Marc Dionne) [2170099]
  - rxrpc: Don't let ack.previousPacket regress (Marc Dionne) [2170099]
  - rxrpc: Fix overlapping ACK accounting (Marc Dionne) [2170099]
  - rxrpc: Don't try to resend the request if we're receiving the reply (Marc Dionne) [2170099]
  - rxrpc: Fix listen() setting the bar too high for the prealloc rings (Marc Dionne) [2170099]
  - rxrpc, afs: Fix selection of abort codes (Marc Dionne) [2170099]
  - rxrpc: Return an error to sendmsg if call failed (Marc Dionne) [2170099]
  - rxrpc: Fix locking issue (Marc Dionne) [2170099]
  - rxrpc: Use refcount_t rather than atomic_t (Marc Dionne) [2170099]
  - rxrpc: Allow list of in-use local UDP endpoints to be viewed in /proc (Marc Dionne) [2170099]
  - rxrpc: Enable IPv6 checksums on transport socket (Marc Dionne) [2170099]
  - rxrpc: Restore removed timer deletion (Marc Dionne) [2170099]
  - rxrpc: fix a race in rxrpc_exit_net() (Marc Dionne) [2170099]
  - rxrpc: fix some null-ptr-deref bugs in server_key.c (Marc Dionne) [2170099]
  - rxrpc: Fix call timer start racing with call destruction (Marc Dionne) [2170099]
  - rxrpc: Adjust retransmission backoff (Marc Dionne) [2170099]
  - rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer() (Marc Dionne) [2170099]
  - rxrpc: Fix rxrpc_peer leak in rxrpc_look_up_bundle() (Marc Dionne) [2170099]
  - rxrpc: Fix _usecs_to_jiffies() by using usecs_to_jiffies() (Marc Dionne) [2170099]
  - net: RxRPC: make dependent Kconfig symbols be shown indented (Marc Dionne) [2170099]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-284.8.1.el9_2]
changelog:
  - Reinstate "GFS2: free disk inode which is deleted by remote node -V2" (Bob Peterson) [2181344]
  - iavf: fix hang on reboot with ice (Stefan Assmann) [2175775]
  - xfs: fix off-by-one-block in xfs_discard_folio() (Carlos Maiolino) [2178173]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-284.10.1.el9_2]
changelog:
  - dm: fix __send_duplicate_bios() to always allow for splitting IO (Benjamin Marzinski) [2184420]
  - dm: fix improper splitting for abnormal bios (Benjamin Marzinski) [2184420]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-284.11.1.el9_2]
changelog:
  - vfio: Make the group FD disassociate from the iommu_group (Alex Williamson) [2180649]
  - vfio: Hold a reference to the iommu_group in kvm for SPAPR (Alex Williamson) [2180649]
  - vfio: Add vfio_file_is_group() (Alex Williamson) [2180649]
  - vfio: Change vfio_group->group_rwsem to a mutex (Alex Williamson) [2180649]
  - vfio: Remove the vfio_group->users and users_comp (Alex Williamson) [2180649]
  - vfio: Follow a strict lifetime for struct iommu_group (Alex Williamson) [2180649]


author: Mridula Shastry <mridula.c.shastry@oracle.com> - [5.14.0-284.18.1.el9_2.OL9]
changelog:
  - cifs: fix wrong unlock before return from cifs_tree_connect()
  - docs: Remove the unnecessary unicode character
  - perf vendor events intel: Refresh ivytown metrics and events
  - perf vendor events: Update Intel ivytown
  - perf vendor events intel: Refresh jaketown metrics and events
  - perf vendor events: Update Intel jaketown
  - NFSD: RHEL-only bug introduced in fix for COMMIT and NFS4ERR_DELAY loop
  - NFSD: Fix problem of COMMIT and NFS4ERR_DELAY in infinite loop
  - workqueue: Fix isolated CPUs interference problem
  - sched/core: Fix arch_scale_freq_tick() on tickless systems
  - ice: no busy waiting in GNSS thread and for SQ commands
  - wdat_wdt: avoid watchdog timeout during reboot
  - hugetlbfs: don't delete error page from pagecache
  - mm/filemap: fix page end in filemap_get_read_batch
  - isched/deadline: Add more reschedule cases to prio_changed_dl()
  - sched/rt: Fix bad task migration for rt tasks
  - blk-mq: directly poll requests
  - KVM: VMX: Fix crash due to uninitialized current_vmcs
  - wifi: iwlwifi: mvm: protect TXQ list manipulation
  - crypto: jitter - permanent and intermittent health errors
  - cpufreq: intel_pstate: hybrid: Use known scaling factor for P-cores
  - cpufreq: intel_pstate: Read all MSRs on the target CPU
  - cpufreq: intel_pstate: Enable HWP IO boost for all servers
  - crypto: qat: Update QAT drivers upto v6.2
  - info/owners.yaml: Adjust intel_qat subsystem entry
  - net: tls: fix possible race condition between do_tls_getsockopt_conf and do_tls_setsockopt_conf() {CVE-2023-28466}
  - i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer() {CVE-2023-2194}
  - xfs: verify buffer contents when we skip log replay {CVE-2023-2124} 
  - bluetooth: Perform careful capability checks in hci_sock_ioctl() {CVE-2023-2002}
  - netfilter: nf_tables: deactivate anonymous set from preparation phase {CVE-2023-32233}
  - perf: Fix check before add_event_to_groups() in perf_group_detach() {CVE-2023-2235}


author:
  Nagappan Ramasamy Palaniappan <nagappan.ramasamy.palaniappan@oracle.com> - [5.14.0-284.25.1.el9_2.OL9]

changelog:
  - KVM: x86/mmu: Fix race condition in direct_page_fault
  - prlimit: do_prlimit needs to have a speculation check {CVE-2023-0458}
  - x86/speculation: Allow enabling STIBP with legacy IBRS {CVE-2023-1998}
  - ipvlan: Fix out of bounds caused by unclear skb->cb {CVE-2023-3090}
  - net/sched: flower: fix possible OOB write in fl_set_geneve_opt {CVE-2023-35788}


author:
  Nagappan Ramasamy Palaniappan <nagappan.ramasamy.palaniappan@oracle.com> - [5.14.0-284.25.1.el9_2.OL9]

changelog:
  - KVM x86 mmuFix race condition in direct_page_fault
  - prlimit do_prlimit needs to have a speculation check
  - x86 speculation Allow enabling STIBP with legacy IBR
  - ipvlan Fix out of bounds caused by unclear skb cb
  - net sched flower fix possible OOB write in fl_set_geneve_opt


author: Mridula Shastry <mridula.c.shastry@oracle.com> - [5.14.0-284.30.0.1.el9_2.OL9]
changelog:
  - x86/tsx: Add a feature bit for TSX control MSR support {CVE-2023-1637}
  - x86/speculation: Restore speculation related MSRs {CVE-2023-1637}
  - x86/pm: Save the MSR validity status at context setup {CVE-2023-1637}
  - x86/pm: Fix false positive kmemleak report in msr_build_context() {CVE-2023-1637}
  - x86/cpu: Restore AMD's DE_CFG MSR after resume {CVE-2023-1637}
  - x86/pm: Add enumeration check before spec MSRs {CVE-2023-1637}
  - arm64: efi: Execute runtime services from a dedicated {CVE-2023-21102}
  - netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE {CVE-2023-3390}
  - netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain {CVE-2023-3390}
  - netfilter: nf_tables: unbind non-anonymous set if rule construction fails {CVE-2023-3390}
  - netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID {CVE-2023-4147}
  - netfilter: nf_tables: do not ignore genmask when looking up chain by id {CVE-2023-31248}
  - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval {CVE-2023-35001}
  - netfilter: nft_set_pipapo: fix improper element removal {CVE-2023-4004}
  - net/sched: cls_fw: Fix improper refcount update leads to use-after-free {CVE-2023-3776}


author: Mridula Shastry <mridula.c.shastry@oracle.com> - [5.14.0-284.30.0.1.el9_2.OL9]
changelog:
  - x86/tsx: Add a feature bit for TSX control MSR support {CVE-2023-1637}
  - x86/speculation: Restore speculation related MSRs {CVE-2023-1637}
  - x86/pm: Save the MSR validity status at context setup {CVE-2023-1637}
  - x86/pm: Fix false positive kmemleak report in msr_build_context() {CVE-2023-1637}
  - x86/cpu: Restore AMD's DE_CFG MSR after resume {CVE-2023-1637}
  - x86/pm: Add enumeration check before spec MSRs {CVE-2023-1637}
  - arm64: efi: Execute runtime services from a dedicated {CVE-2023-21102}
  - netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE {CVE-2023-3390}
  - netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain {CVE-2023-3390}
  - netfilter: nf_tables: unbind non-anonymous set if rule construction fails {CVE-2023-3390}
  - netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID {CVE-2023-4147}
  - netfilter: nf_tables: do not ignore genmask when looking up chain by id {CVE-2023-31248}
  - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval {CVE-2023-35001}
  - netfilter: nf_tables: fix chain binding transaction logic {CVE-2023-3610}
  - netfilter: nft_set_pipapo: fix improper element removal {CVE-2023-4004}
  - net/sched: cls_fw: Fix improper refcount update leads to use-after-free {CVE-2023-3776}


author: Mridula Shastry <mridula.c.shastry@oracle.com> - [5.14.0-284.30.1.el9_2.OL9]
changelog:
  - x86/microcode/intel: Expose collect_cpu_info_early() for IFS
  - x86/cpu: Load microcode during restore_processor_state()
  - x86/microcode: Rip out the OLD_INTERFACE
  - x86/microcode: Default-disable late loading
  - x86/microcode: Taint and warn on late loading
  - x86/microcode: Remove unnecessary perf callback
  - x86/microcode: Print previous version of microcode after reload 
  - x86/microcode: Rip out the subsys interface gunk
  - x86/microcode: Simplify init path even more
  - x86/microcode/AMD: Rename a couple of functions {CVE-2023-20593}
  - x86/microcode: Add a parameter to microcode_check() to store CPU capabilities {CVE-2023-20593}
  - x86/microcode: Check CPU capabilities after late microcode update correctly {CVE-2023-20593}
  - x86/microcode: Adjust late loading result reporting message {CVE-2023-20593}
  - x86/amd: Cache debug register values in percpu variables {CVE-2023-20593}
  - x86/microcode: Remove ->request_microcode_user()
  - x86/microcode: Kill refresh_fw
  - x86/microcode/amd: Remove load_microcode_amd()'s bsp parameter {CVE-2023-20593}
  - x86/microcode: Drop struct ucode_cpu_info.valid
  - x86/microcode/AMD: Add a @cpu parameter to the reloading functions {CVE-2023-20593}
  - x86/microcode/AMD: Track patch allocation size explicitly
  - x86/microcode/AMD: Fix mixed steppings support {CVE-2023-20593}
  - x86/microcode/core: Return an error only when necessary {CVE-2023-20593}
  - x86/apic: Don't disable x2APIC if locked
  - x86/cpu/amd: Move the errata checking functionality up {CVE-2023-20593}
  - x86/cpu: Remove redundant extern x86_read_arch_cap_msr()
  - x86/cpu, kvm: Add support for CPUID_80000021_EAX
  - KVM: x86: Advertise that the SMM_CTL MSR is not supported
  - KVM: x86: Move open-coded CPUID leaf 0x80000021 EAX bit propagation code
  - x86/cpu, kvm: Add the NO_NESTED_DATA_BP feature
  - x86/bugs: Make sure MSR_SPEC_CTRL is updated properly upon resume from S3
  - x86/cpu: Support AMD Automatic IBRS
  - x86/CPU/AMD: Make sure EFER[AIBRSE] is set
  - x86/cpu/amd: Add a Zenbleed fix {CVE-2023-20593}


author: Jan Stancek <jstancek@redhat.com> [5.14.0-362.2.1.el9_3]
changelog:
  - PCI: hv: Fix a crash in hv_pci_restore_msi_msg() during hibernation (Vitaly Kuznetsov) [2211797]
  - rhel: Re-add can-dev features that were removed accidentally (Radu Rendec) [2213891]
  - EDAC/amd64: Add support for ECC on family 19h model 60h-7Fh (Aristeu Rozanski) [2218686]
  - EDAC/amd64: Remove PCI Function 0 (Aristeu Rozanski) [2218686]
  - EDAC/amd64: Remove PCI Function 6 (Aristeu Rozanski) [2218686]
  - EDAC/amd64: Remove scrub rate control for Family 17h and later (Aristeu Rozanski) [2218686]
  - EDAC/amd64: Don't set up EDAC PCI control on Family 17h+ (Aristeu Rozanski) [2218686]
  - net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225102] {CVE-2023-3776}


author: Jan Stancek <jstancek@redhat.com> [5.14.0-362.3.1.el9_3]
changelog:
  - blk-throttle: Fix io statistics for cgroup v1 (Ming Lei) [2208905]
  - block: make sure local irq is disabled when calling __blkcg_rstat_flush (Ming Lei) [2208905]
  - blk-cgroup: Flush stats before releasing blkcg_gq (Ming Lei) [2208905]
  - blk-cgroup: hold queue_lock when removing blkg->q_node (Ming Lei) [2217205]


author: Jan Stancek <jstancek@redhat.com> [5.14.0-362.4.1.el9_3]
changelog:
  - Revert "net: macsec: preserve ingress frame ordering" (Sabrina Dubroca) [RHEL-2248]
  - nfsd: fix change_info in NFSv4 RENAME replies (Jeffrey Layton) [2218844]
  - drm/amd/display: fix the white screen issue when >= 64GB DRAM (Mika Penttilä) [2231925]


author: Jan Stancek <jstancek@redhat.com> [5.14.0-362.5.1.el9_3]
changelog:
  - x86/mce: Add support for Extended Physical Address MCA changes (Aristeu Rozanski) [2164637]
  - x86/mce: Define a function to extract ErrorAddr from MCA_ADDR (Aristeu Rozanski) [2164637]
  - x86/mce: Avoid unnecessary padding in struct mce_bank (Aristeu Rozanski) [2164637]
  - net/mlx5e: TC, Remove sample and ct limitation (Amir Tzin) [2229736]
  - net/mlx5e: TC, Remove mirror and ct limitation (Amir Tzin) [2229736]
  - net/mlx5e: TC, Remove tuple rewrite and ct limitation (Amir Tzin) [2229736]
  - net/mlx5e: TC, Remove multiple ct actions limitation (Amir Tzin) [2229736]
  - net/mlx5e: TC, Remove CT action reordering (Amir Tzin) [2229736]
  - net/mlx5e: CT: Use per action stats (Amir Tzin) [2229736]
  - net/mlx5e: TC, Move main flow attribute cleanup to helper func (Amir Tzin) [2229736]
  - net/mlx5e: TC, Remove unused vf_tun variable (Amir Tzin) [2229736]
  - net/mlx5e: Set default can_offload action (Amir Tzin) [2229736]


author: Jan Stancek <jstancek@redhat.com> [5.14.0-362.6.1.el9_3]
changelog:
  - kabi: enable check-kabi (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol zlib_inflate_workspacesize to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol zlib_inflateInit2 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol zlib_inflateEnd to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol zlib_inflate to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol zalloc_cpumask_var to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol yield to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol xz_dec_run to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol xz_dec_init to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol xz_dec_end to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol xa_store to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol xas_find to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol xa_set_mark to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol xa_load to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __xa_insert to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol xa_get_mark to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol xa_find_after to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol xa_find to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol xa_erase to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol xa_destroy to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol xa_clear_mark to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __xa_alloc_cyclic to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __xa_alloc to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol x86_spec_ctrl_base to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __x86_return_thunk to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __x86_indirect_thunk_rsi to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __x86_indirect_thunk_rdx to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __x86_indirect_thunk_rdi to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __x86_indirect_thunk_rcx to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __x86_indirect_thunk_rbx to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __x86_indirect_thunk_rbp to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __x86_indirect_thunk_rax to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __x86_indirect_thunk_r9 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __x86_indirect_thunk_r8 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __x86_indirect_thunk_r15 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __x86_indirect_thunk_r14 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __x86_indirect_thunk_r13 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __x86_indirect_thunk_r12 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __x86_indirect_thunk_r11 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __x86_indirect_thunk_r10 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol x86_cpu_to_apicid to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __write_overflow_field to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __warn_printk to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __wake_up to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol wait_for_completion_timeout to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol wait_for_completion_interruptible to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol wait_for_completion to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol vzalloc to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol vsprintf to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol vsnprintf to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol vprintk to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol vm_zone_stat to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol vm_munmap to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol vm_event_states to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol vmemmap_base to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol vmalloc_to_page to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol vmalloc_node to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol vmalloc_base to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol vmalloc_32 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol vmalloc to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __vmalloc to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __virt_addr_valid to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol vfree to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __var_waitqueue to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol uv_undefined to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol uv_teardown_irq to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol uv_setup_irq to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol uv_possible_blades to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __uv_hub_info_list to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol uv_get_hubless_system to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __uv_cpu_info to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol uv_bios_obj_count to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol uv_bios_install_heap to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol uv_bios_get_pci_topology to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol uv_bios_get_master_nasid to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol uv_bios_get_heapsize to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol uv_bios_get_geoinfo to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol uv_bios_enum_ports to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol uv_bios_enum_objs to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol usleep_range_state to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol up_write to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol up_read to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol up to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol unregister_shrinker to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol unregister_reboot_notifier to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol unregister_nmi_handler to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol unregister_kprobe to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol unregister_chrdev_region to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __unregister_chrdev to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol unregister_blkdev to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __udelay to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol tty_termios_encode_baud_rate to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol tty_std_termios to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol tsc_khz to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol try_wait_for_completion to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol trace_seq_putc to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol trace_seq_printf to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol trace_print_flags_seq to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol trace_handle_return to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol touch_softlockup_watchdog to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _totalram_pages to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol timer_delete_sync to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol timer_delete to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol timecounter_read to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol timecounter_init to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol timecounter_cyc2time to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol time64_to_tm to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol this_cpu_off to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol tasklet_unlock_wait to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol tasklet_setup to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __tasklet_schedule to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol tasklet_kill to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol tasklet_init to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __tasklet_hi_schedule to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol sys_tz to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol system_wq to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol system_state to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol system_freezing_cnt to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol sysfs_streq to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol sysfs_emit to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol synchronize_rcu to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol synchronize_irq to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __symbol_put to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __symbol_get to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __sw_hweight64 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __sw_hweight32 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol strstr to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol strsep to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol strscpy_pad to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol strscpy to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol strrchr to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol strnlen_user to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol strnlen to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol strncpy_from_user to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol strncpy to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol strncmp to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol strncasecmp to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol strlen to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol strlcpy to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol strlcat to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol strim to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol strcspn to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol strcpy to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol strcmp to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol strchr to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol strcat to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol static_key_slow_inc to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol static_key_slow_dec to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol static_key_count to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __stack_chk_fail to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol sscanf to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol sprintf to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol sort to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol sn_region_size to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol snprintf to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol sn_partition_id to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol smp_call_function_single_async to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol smp_call_function_single to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol smp_call_function_many to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol sme_me_mask to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol simple_write_to_buffer to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol simple_strtoull to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol simple_strtoul to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol simple_strtol to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol simple_read_from_buffer to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol si_meminfo to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol sigprocmask to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __sg_page_iter_start to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __sg_page_iter_dma_next to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol sg_next to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol set_normalized_timespec64 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol set_freezable to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol set_current_groups to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol security_sb_eat_lsm_opts to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol security_free_mnt_opts to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __SCT__tp_func_xdp_exception to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __SCT__preempt_schedule_notrace to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __SCT__preempt_schedule to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __SCT__might_resched to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __SCT__cond_resched to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol scsilun_to_int to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol scsi_command_size_tbl to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol scnprintf to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol schedule_timeout to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol schedule to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol sched_clock_cpu to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol sched_clock to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol round_jiffies to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol rht_bucket_nested_insert to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol rht_bucket_nested to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __rht_bucket_nested to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol rhltable_init to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol rhashtable_insert_slow to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol rhashtable_init to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol rhashtable_free_and_destroy to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol rhashtable_destroy to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol request_threaded_irq to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __request_region to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __request_module to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol remove_wait_queue to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __release_region to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol release_firmware to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol register_shrinker to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol register_reboot_notifier to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __register_nmi_handler to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol register_kprobe to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol register_chrdev_region to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __register_blkdev to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __refrigerator to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol refcount_warn_saturate to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol refcount_dec_if_one to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol refcount_dec_and_mutex_lock to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol recalc_sigpending to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __read_overflow2_field to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol rcu_read_unlock_strict to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __rcu_read_unlock to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __rcu_read_lock to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol rcu_barrier to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol rb_next to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol rb_insert_color to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol rb_first to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol rb_erase to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_write_unlock_irqrestore to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_write_unlock_irq to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_write_unlock_bh to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_write_unlock to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_write_trylock to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_write_lock_irqsave to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_write_lock_irq to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_write_lock_bh to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_write_lock to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_spin_unlock_irqrestore to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_spin_unlock_irq to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_spin_unlock_bh to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_spin_unlock to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_spin_trylock_bh to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_spin_trylock to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_spin_lock_irqsave to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_spin_lock_irq to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_spin_lock_bh to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_spin_lock to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_read_unlock_irqrestore to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_read_unlock_irq to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_read_unlock_bh to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_read_unlock to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_read_lock_irqsave to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_read_lock_irq to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_read_lock_bh to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _raw_read_lock to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol ___ratelimit to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol radix_tree_tag_set to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol radix_tree_next_chunk to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol radix_tree_lookup to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol radix_tree_insert to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol radix_tree_delete to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol queue_work_on to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol queue_delayed_work_on to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol qed_put_iscsi_ops to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol qed_put_eth_ops to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __put_user_8 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __put_user_4 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __put_user_2 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol put_unused_fd to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol ptrs_per_p4d to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol proc_dostring to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol proc_dointvec_minmax to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol proc_dointvec to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __printk_ratelimit to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _printk to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol print_hex_dump to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol prepare_to_wait_exclusive to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol prepare_to_wait_event to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol prepare_to_wait to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol prandom_u32 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol posix_acl_alloc to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol physical_mask to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol phys_base to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol pgprot_writecombine to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol pgdir_shift to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol perf_trace_buf_alloc to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol percpu_ref_init to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol percpu_ref_exit to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __per_cpu_offset to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol panic_notifier_list to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol panic to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol page_offset_base to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol page_frag_free to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol on_each_cpu_cond_mask to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __num_online_cpus to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol numa_node to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol ns_to_timespec64 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol nr_cpu_ids to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol node_to_cpumask_map to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol node_states to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __node_distance to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __ndelay to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol mutex_unlock to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol mutex_trylock to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol mutex_lock_interruptible to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol mutex_lock to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol mutex_is_locked to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __mutex_init to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol msleep_interruptible to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol msleep to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __msecs_to_jiffies to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol mod_timer to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol mod_delayed_work_on to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol memset to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol mem_section to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol mempool_free_slab to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol mempool_free to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol mempool_destroy to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol mempool_create_node to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol mempool_create to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol mempool_alloc_slab to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol mempool_alloc to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol memparse to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol memory_read_from_buffer to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol memmove to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol memdup_user to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol memcpy to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol memcmp to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol memchr_inv to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol mds_idle_clear to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol loops_per_jiffy to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol lookup_bdev to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol lockref_get to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __local_bh_enable_ip to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol llist_add_batch to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __list_del_entry_valid to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __list_add_valid to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kvmalloc_node to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kvfree_call_rcu to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kvfree to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol ktime_get_with_offset to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol ktime_get_ts64 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol ktime_get_real_ts64 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol ktime_get_real_seconds to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol ktime_get_coarse_real_ts64 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol ktime_get to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kthread_should_stop to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kthread_delayed_work_timer_fn to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kthread_complete_and_exit to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kstrtoull to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kstrtouint to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kstrtou8 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kstrtou16 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kstrtoll to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kstrtoint to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kstrtobool to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kstrdup to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol krealloc to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kmemdup to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kmem_cache_create_usercopy to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kmem_cache_create to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kmalloc_order_trace to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __kmalloc_node to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __kmalloc to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kfree to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kexec_crash_loaded to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kernel_sigaction to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kernel_fpu_end to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kernel_fpu_begin_mask to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol kasprintf to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol jiffies_to_usecs to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol jiffies_to_msecs to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol jiffies_64 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol jiffies to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol is_vmalloc_addr to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol is_uv_system to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol iscsi_boot_create_host_kset to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol irq_set_affinity_notifier to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol irq_poll_enable to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol irq_poll_disable to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol irq_cpu_rmap_add to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __irq_apply_affinity_hint to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol iowrite32be to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol iounmap to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol ioremap_wc to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol ioremap to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol ioread8 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol ioread32be to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol ioread16be to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol iomem_resource to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol int_to_scsilun to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol int_pow to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol init_wait_var_entry to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __init_waitqueue_head to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol init_wait_entry to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol init_timer_key to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __init_swait_queue_head to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __init_rwsem to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol in_group_p to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol in_aton to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol in6_pton to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol in4_pton to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol idr_remove to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol idr_preload to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol idr_get_next_ul to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol idr_find to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol idr_destroy to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol idr_alloc_u32 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol idr_alloc to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol ida_free to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol ida_destroy to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol ida_alloc_range to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __hw_addr_init to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol hugetlb_optimize_vmemmap_key to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol hrtimer_start_range_ns to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol hrtimer_init to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol hrtimer_forward to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol hrtimer_cancel to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol groups_free to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol groups_alloc to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol get_zeroed_page to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __get_user_nocheck_1 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __get_user_2 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __get_user_1 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol get_unused_fd_flags to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol get_random_bytes to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __get_free_pages to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol gcd to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol free_percpu to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol free_pages to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol free_irq_cpu_rmap to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol free_irq to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol free_cpumask_var to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol fortify_panic to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __flush_workqueue to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol flush_work to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol finish_wait to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _find_next_zero_bit to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _find_next_bit to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _find_last_bit to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _find_first_zero_bit to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _find_first_bit to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __fentry__ to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol enable_irq to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol empty_zero_page to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol emergency_restart to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol elfcorehdr_addr to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol efi to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __dynamic_pr_debug to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol dump_stack to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol dql_reset to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol dql_completed to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol down_write_trylock to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol down_write to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol down_trylock to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol down_read_trylock to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol down_read to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol down_interruptible to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol downgrade_write to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol down to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol dmi_get_system_info to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol dmi_find_device to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol dma_pool_free to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol dma_pool_destroy to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol dma_pool_alloc to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol disable_irq to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol devmap_managed_key to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol dev_base_lock to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol destroy_workqueue to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol delayed_work_timer_fn to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __delay to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol default_wake_function to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol dca_unregister_notify to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol dca_register_notify to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol current_umask to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _ctype to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol csum_partial to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol csum_ipv6_magic to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol crc32_le to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol cpu_sibling_map to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __cpu_present_mask to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __cpu_possible_mask to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __cpu_online_mask to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol cpu_number to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol cpumask_local_spread to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol cpu_khz to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol cpu_info to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __cpuhp_setup_state to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __cpuhp_remove_state to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol cpufreq_quick_get to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol cpu_bit_bitmap to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol copy_user_generic_unrolled to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol copy_user_generic_string to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _copy_to_user to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __copy_overflow to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _copy_from_user to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __const_udelay to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol congestion_wait to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __cond_resched to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol complete_all to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol complete to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol clock_t_to_jiffies to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __check_object_size to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol cdev_alloc to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol cc_mkdec to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol capable to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol cancel_work_sync to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol cancel_work to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol cancel_delayed_work_sync to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol cancel_delayed_work to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol call_usermodehelper to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol call_srcu to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol call_rcu to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol cachemode2protval to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol boot_cpu_data to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol blocking_notifier_call_chain to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol blk_status_to_errno to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol blk_stack_limits to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol blk_mq_map_queues to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol blkdev_get_by_path to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol blkdev_get_by_dev to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __blk_alloc_disk to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol bitmap_zalloc_node to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol bitmap_zalloc to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __bitmap_xor to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __bitmap_weight to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __bitmap_subset to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __bitmap_set to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol bitmap_release_region to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol bitmap_print_to_pagebuf to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol bitmap_parselist to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __bitmap_or to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __bitmap_intersects to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol bitmap_from_arr32 to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol bitmap_free to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol bitmap_find_free_region to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __bitmap_equal to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __bitmap_clear to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __bitmap_andnot to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __bitmap_and to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol bio_kmalloc to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol bin2hex to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol avenrun to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol autoremove_wake_function to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol atomic_notifier_call_chain to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol _atomic_dec_and_lock to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol async_synchronize_full_domain to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol async_synchronize_full to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol argv_split to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol argv_free to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol arch_touch_nmi_watchdog to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol alloc_workqueue to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __alloc_percpu to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol alloc_pages to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol __alloc_pages to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol alloc_cpu_rmap to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol alloc_cpumask_var to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol alloc_chrdev_region to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol add_wait_queue_exclusive to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol add_wait_queue to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol add_timer to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol acpi_get_table to stablelist (Čestmír Kalina) [RHEL-8864]
  - kabi: add symbol acpi_disabled to stablelist (Čestmír Kalina) [RHEL-8864]
  - scsi: lpfc: Prevent use-after-free during rmmod with mapped NVMe rports (Paul Ely) [RHEL-2604]
  - scsi: lpfc: Early return after marking final NLP_DROPPED flag in dev_loss_tmo (Paul Ely) [RHEL-2604]


author: Jan Stancek <jstancek@redhat.com> [5.14.0-362.7.1.el9_3]
changelog:
  - drm/amd: flush any delayed gfxoff on suspend entry (Mika Penttilä) [2232662]
  - drm/amdgpu: skip fence GFX interrupts disable/enable for S0ix (Mika Penttilä) [2232662]
  - drm/amd/pm: skip the RLC stop when S0i3 suspend for SMU v13.0.4/11 (Mika Penttilä) [2232662]
  - Revert "net/mlx5e: Switch to using napi_build_skb()" (Mohammad Kabat) [RHEL-1267]


author: Jan Stancek <jstancek@redhat.com> [5.14.0-362.8.1.el9_3]
changelog:
  - Revert "cnic: don't pass bogus GFP_ flags to dma_alloc_coherent" (Chris Leech) [RHEL-2542]
  - Revert "dma-mapping: reject __GFP_COMP in dma_alloc_attrs" (Chris Leech) [RHEL-2542]


author: Natalya Naumova <natalya.naumova@oracle.com> - [5.14.0-362.8.1.el9_3.OL9]
changelog:
  - Update Oracle Linux certificates (Kevin Lyons)
  - Disable signing for aarch64 (Ilya Okomin)
  - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
  - Update x509.genkey [Orabug: 24817676]
  - Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5.el9
  - Remove nmap references from kernel (Mridula Shastry) [Orabug: 34313944]
  - Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
  - Disable unified kernel image package build
  - Add Oracle Linux IMA certificates


author: Mridula Shastry <mridula.c.shastry@oracle.com> - [5.14.0-362.13.0.1.el9_3.OL9]
changelog:
  - cifs: Fix UAF in cifs_demultiplex_thread() (Zhang Xiaoxu) (Steve French) {CVE-2023-1192}
  - fs/smb/client: Reset password pointer to NULL (Quang Le) (Steve French) {CVE-2023-5345}
  - igb: set max size RX buffer when store bad packet is enabled (Tony Nguyen) (David S. Miller) {CVE-2023-45871}


author: Mridula Shastry <mridula.c.shastry@oracle.com> - [5.14.0-362.13.1.el9_3.OL9]
changelog:
  - x86/retpoline: Document some thunk handling aspects (Borislav Petkov) {CVE-2023-20569}
  - objtool: Fix return thunk patching in retpolines (Josh Poimboeuf) {CVE-2023-20569}
  - x86/srso: Remove unnecessary semicolon (Yang Li) {CVE-2023-20569}
  - x86/calldepth: Rename __x86_return_skl() to call_depth_return_thunk() (Josh Poimboeuf) {CVE-2023-20569}
  - x86/nospec: Refactor UNTRAIN_RET[_*] (Josh Poimboeuf) {CVE-2023-20569}
  - x86/rethunk: Use SYM_CODE_START[_LOCAL]_NOALIGN macros (Josh Poimboeuf) {CVE-2023-20569}
  - x86/srso: Disentangle rethunk-dependent options (Josh Poimboeuf) {CVE-2023-20569}
  - x86/srso: Move retbleed IBPB check into existing 'has_microcode' code block (Josh Poimboeuf) {CVE-2023-20569}
  - x86/bugs: Remove default case for fully switched enums (Josh Poimboeuf) {CVE-2023-20569}
  - x86/srso: Remove 'pred_cmd' label (Josh Poimboeuf) {CVE-2023-20569}
  - x86/srso: Unexport untraining functions (Josh Poimboeuf) {CVE-2023-20569}
  - x86/srso: Improve i-cache locality for alias mitigation (Josh Poimboeuf) {CVE-2023-20569}
  - x86/srso: Fix unret validation dependencies (Josh Poimboeuf) {CVE-2023-20569}
  - x86/srso: Fix vulnerability reporting for missing microcode (Josh Poimboeuf) {CVE-2023-20569}
  - x86/srso: Print mitigation for retbleed IBPB case (Josh Poimboeuf) {CVE-2023-20569}
  - x86/srso: Print actual mitigation if requested mitigation isn't possible (Josh Poimboeuf) [RHEL-8594] {CVE-2023-20569}
  - x86/srso: Fix SBPB enablement for (possible) future fixed HW (Josh Poimboeuf) {CVE-2023-20569}
  - x86,static_call: Fix static-call vs return-thunk (Peter Zijlstra) {CVE-2023-20569}
  - x86/alternatives: Remove faulty optimization (Josh Poimboeuf) {CVE-2023-20569}
  - x86/srso: Fix SBPB enablement for spec_rstack_overflow=off (Josh Poimboeuf) {CVE-2023-20569}
  - x86/srso: Don't probe microcode in a guest (Josh Poimboeuf) {CVE-2023-20569}
  - x86/srso: Set CPUID feature bits independently of bug or mitigation status (Josh Poimboeuf) {CVE-2023-20569}
  - x86/srso: Fix srso_show_state() side effect (Josh Poimboeuf) {CVE-2023-20569}
  - x86/cpu: Fix amd_check_microcode() declaration (Arnd Bergmann) {CVE-2023-20569}
  - x86/srso: Correct the mitigation status when SMT is disabled (Borislav Petkov) {CVE-2023-20569}
  - x86/static_call: Fix __static_call_fixup() (Peter Zijlstra) {CVE-2023-20569}
  - objtool/x86: Fixup frame-pointer vs rethunk (Peter Zijlstra) {CVE-2023-20569}
  - x86/srso: Explain the untraining sequences a bit more (Borislav Petkov) {CVE-2023-20569}
  - x86/cpu/kvm: Provide UNTRAIN_RET_VM (Peter Zijlstra) {CVE-2023-20569}
  - x86/cpu: Cleanup the untrain mess (Peter Zijlstra) {CVE-2023-20569}
  - x86/cpu: Rename srso_(.*)_alias to srso_alias_\1 (Peter Zijlstra) {CVE-2023-20569}
  - x86/cpu: Rename original retbleed methods (Peter Zijlstra) {CVE-2023-20569}
  - x86/cpu: Clean up SRSO return thunk mess (Peter Zijlstra) {CVE-2023-20569}
  - x86/alternative: Make custom return thunk unconditional (Peter Zijlstra) {CVE-2023-20569}
  - objtool/x86: Fix SRSO mess (Peter Zijlstra) {CVE-2023-20569}
  - x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() (Peter Zijlstra) {CVE-2023-20569}
  - x86/cpu: Fix __x86_return_thunk symbol type (Peter Zijlstra) {CVE-2023-20569}
  - x86/retpoline,kprobes: Skip optprobe check for indirect jumps with retpolines and IBT (Petr Pavlu) {CVE-2023-20569}
  - x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG (Petr Pavlu) {CVE-2023-20569}
  - x86/srso: Disable the mitigation on unaffected configurations (Borislav Petkov) {CVE-2023-20569}
  - x86/CPU/AMD: Fix the DIV(0) initial fix attempt (Borislav Petkov) {CVE-2023-20588}
  - x86/retpoline: Don't clobber RFLAGS during srso_safe_ret() (Sean Christopherson) {CVE-2023-20569}
  - x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405 (Cristian Ciocaltea) {CVE-2023-20593}
  - driver core: cpu: Fix the fallback cpu_show_gds() name (Borislav Petkov) {CVE-2023-20569}
  - x86: Move gds_ucode_mitigated() declaration to header (Arnd Bergmann) {CVE-2023-20569}
  - x86/speculation: Add cpu_show_gds() prototype (Arnd Bergmann) {CVE-2023-20569}
  - driver core: cpu: Make cpu_show_not_affected() static (Borislav Petkov) {CVE-2023-20569}
  - x86/srso: Fix build breakage with the LLVM linker (Nick Desaulniers) {CVE-2023-20569}
  - Documentation/srso: Document IBPB aspect and fix formatting (Borislav Petkov) {CVE-2023-20569}
  - driver core: cpu: Unify redundant silly stubs (Borislav Petkov) {CVE-2023-20569}
  - Documentation/hw-vuln: Unify filename specification in index (Borislav Petkov) {CVE-2023-20569}
  - x86/CPU/AMD: Do not leak quotient data after a division by 0 (Borislav Petkov) {CVE-2023-20588}
  - x86/srso: Tie SBPB bit setting to microcode patch detection (Borislav Petkov) {CVE-2023-20569}
  - x86/srso: Add a forgotten NOENDBR annotation (Borislav Petkov) {CVE-2023-20569}
  - x86/srso: Fix return thunks in generated code (Josh Poimboeuf) {CVE-2023-20569}
  - x86/srso: Add IBPB on VMEXIT (Borislav Petkov) {CVE-2023-20569}
  - x86/srso: Add IBPB (Borislav Petkov) {CVE-2023-20569}
  - x86/srso: Add SRSO_NO support (Borislav Petkov) {CVE-2023-20569}
  - x86/srso: Add IBPB_BRTYPE support (Borislav Petkov) {CVE-2023-20569}
  - redhat/configs/x86: Enable CONFIG_CPU_SRSO (Borislav Petkov) {CVE-2023-20569}
  - x86/srso: Add a Speculative RAS Overflow mitigation (Borislav Petkov) {CVE-2023-20569}
  - x86/retbleed: Add __x86_return_thunk alignment checks (Borislav Petkov) {CVE-2023-20569}
  - x86/retbleed: Fix return thunk alignment (Borislav Petkov) {CVE-2023-20569}
  - x86/alternative: Optimize returns patching (Borislav Petkov) {CVE-2023-20569}
  - x86,objtool: Separate unret validation from unwind hints (Josh Poimboeuf) {CVE-2023-20569}
  - objtool: Add objtool_types.h (Josh Poimboeuf) {CVE-2023-20569}
  - objtool: Union instruction::{call_dest,jump_table} (Peter Zijlstra) {CVE-2023-20569}
  - x86/kprobes: Fix optprobe optimization check with CONFIG_RETHUNK (Peter Zijlstra) {CVE-2023-20569}
  - objtool: Fix SEGFAULT (Christophe Leroy) {CVE-2023-20569}
  - vmlinux.lds.h: add BOUNDED_SECTION* macros (Jim Cromie) {CVE-2023-20569}


author: Mridula Shastry <mridula.c.shastry@oracle.com> - [5.14.0-362.18.0.1.el9_3.OL9]
changelog:
  - nfp: fix use-after-free in area_cache_get() (Jialiang Wang) {CVE-2022-3545}
  - drivers: net: slip: fix NPD bug in sl_tx_timeout() (Duoming Zhou) {CVE-2022-41858}
  - can: af_can: fix NULL pointer dereference in can_rcv_filter (Oliver Hartkopp) {CVE-2023-2166}
  - RDMA/core: Fix resolve_prepare_src error cleanup (Patrisious Haddad) {CVE-2023-2176}
  - netfilter: nf_tables: skip bound chain on rule flush (Pablo Neira Ayuso} {CVE-2023-3777}
  - net: tun: fix bugs for oversize packet when napi frags enabled (Ziyang Xuan) {CVE-2023-3812}
  - netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR (Pablo Neira Ayuso) {CVE-2023-4015}
  - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Kuniyuki Iwashima) {CVE-2023-4622}
  - nvmet-tcp: Fix a possible UAF in queue intialization setup (Sagi Grimberg) {CVE-2023-5178}
  - fbcon: set_con2fb_map needs to set con2fb_map! (Daniel Vetter) {CVE-2023-38409}
  - fbcon: Fix error paths in set_con2fb_map (Daniel Vetter) {CVE-2023-38409}
  - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb (Sungwoo Kim) {CVE-2023-40283)
  - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Kyle Zeng) {CVE-2023-42753}
  - x86/sev: Check IOBM for IOIO exceptions from user-space (Joerg Roedel) {CVE-2023-46813}
  - x86/sev: Disable MMIO emulation from user mode (Borislav Petkov) {CVE-2023-46813}
  - x86/sev: Check for user-space IOIO pointing to kernel space (Joerg Roedel) {CVE-2023-46813}


author: Srikanth C S <srikanth.c.s@oracle.com> - [5.14.0-362.18.0.2.el9_3.OL9]
changelog:
  - net/sched: sch_hfsc: Ensure inner classes have fsc curve {CVE-2023-4623}
  - net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve {CVE-2023-4623}
  - dpll: core: Add DPLL framework base functions {CVE-2023-6679}
  - dpll: spec: Add Netlink spec in YAML {CVE-2023-6679}
  - dpll: netlink: Add DPLL framework base functions {CVE-2023-6679}
  - netdev: expose DPLL pin handle for netdevice {CVE-2023-6679}
  - netdev: Remove unneeded semicolon {CVE-2023-6679}
  - dpll: netlink/core: add support for pin-dpll signal phase offset/adjust {CVE-2023-6679}
  - dpll: netlink/core: change pin frequency set behavior {CVE-2023-6679}
  - dpll: Fix potential msg memleak when genlmsg_put_reply failed {CVE-2023-6679}
  - dpll: sanitize possible null pointer dereference in dpll_pin_parent_pin_set() {CVE-2023-6679}


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-362.11.1.el9_3]
changelog:
  - mm, mremap: fix mremap() expanding for vma's with vm_ops->close() (Donald Dutile) [RHEL-15277 RHEL-9198]
  - qed: fix LL2 RX buffer allocation (Chris Leech) [RHEL-14496 RHEL-8466]
  - fs/buffer.c: disable per-CPU buffer_head cache for isolated CPUs (Marcelo Tosatti) [RHEL-12101 2158709]


author: Jan Stancek <jstancek@redhat.com> [5.14.0-362.12.1.el9_3]
changelog:
  - fs/smb/client: Reset password pointer to NULL (Scott Mayhew) [RHEL-11804 RHEL-11808 RHEL-11805 RHEL-11809] {CVE-2023-5345}


author: Jan Stancek <jstancek@redhat.com> [5.14.0-362.13.1.el9_3]
changelog:
  - cifs: Fix UAF in cifs_demultiplex_thread() (Scott Mayhew) [RHEL-15169 RHEL-15173 RHEL-15170 RHEL-15174] {CVE-2023-1192}
  - iommu: Optimise PCI SAC address trick (Jerry Snitselaar) [RHEL-15381 RHEL-11705]
  - igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15191 RHEL-15202 RHEL-15192 RHEL-15203] {CVE-2023-45871}
  - bio-integrity: create multi-page bvecs in bio_integrity_add_page() (Ming Lei) [RHEL-15107 RHEL-13714]
  - bio-integrity: cleanup adding integrity pages to bip's bvec. (Ming Lei) [RHEL-15107 RHEL-13714]
  - bio-integrity: update the payload size in bio_integrity_add_page() (Ming Lei) [RHEL-15107 RHEL-13714]
  - block: make bvec_try_merge_hw_page() non-static (Ming Lei) [RHEL-15107 RHEL-13714]
  - block: don't pass a bio to bio_try_merge_hw_seg (Ming Lei) [RHEL-15107 RHEL-13714]
  - block: move the bi_size update out of __bio_try_merge_page (Ming Lei) [RHEL-15107 RHEL-13714]
  - block: downgrade a bio_full call in bio_add_page (Ming Lei) [RHEL-15107 RHEL-13714]
  - block: move the bi_size overflow check in __bio_try_merge_page (Ming Lei) [RHEL-15107 RHEL-13714]
  - block: move the bi_vcnt check out of __bio_try_merge_page (Ming Lei) [RHEL-15107 RHEL-13714]
  - block: move the BIO_CLONED checks out of __bio_try_merge_page (Ming Lei) [RHEL-15107 RHEL-13714]
  - block: use SECTOR_SHIFT bio_add_hw_page (Ming Lei) [RHEL-15107 RHEL-13714]
  - block: tidy up the bio full checks in bio_add_hw_page (Ming Lei) [RHEL-15107 RHEL-13714]
  - block: kmsan: skip bio block merging logic for KMSAN (Ming Lei) [RHEL-15107 RHEL-13714]
  - redhat: change builder image to rhel-9.3 (Michael Hofmann)
  - x86/retpoline: Document some thunk handling aspects (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - objtool: Fix return thunk patching in retpolines (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Remove unnecessary semicolon (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/calldepth: Rename __x86_return_skl() to call_depth_return_thunk() (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/nospec: Refactor UNTRAIN_RET[_*] (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/rethunk: Use SYM_CODE_START[_LOCAL]_NOALIGN macros (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Disentangle rethunk-dependent options (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Move retbleed IBPB check into existing 'has_microcode' code block (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/bugs: Remove default case for fully switched enums (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Remove 'pred_cmd' label (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Unexport untraining functions (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Improve i-cache locality for alias mitigation (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Fix unret validation dependencies (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Fix vulnerability reporting for missing microcode (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Print mitigation for retbleed IBPB case (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Print actual mitigation if requested mitigation isn't possible (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Fix SBPB enablement for (possible) future fixed HW (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86,static_call: Fix static-call vs return-thunk (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/alternatives: Remove faulty optimization (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Fix SBPB enablement for spec_rstack_overflow=off (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Don't probe microcode in a guest (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Set CPUID feature bits independently of bug or mitigation status (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Fix srso_show_state() side effect (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/cpu: Fix amd_check_microcode() declaration (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Correct the mitigation status when SMT is disabled (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/static_call: Fix __static_call_fixup() (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - objtool/x86: Fixup frame-pointer vs rethunk (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Explain the untraining sequences a bit more (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/cpu/kvm: Provide UNTRAIN_RET_VM (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/cpu: Cleanup the untrain mess (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/cpu: Rename srso_(.*)_alias to srso_alias_\1 (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/cpu: Rename original retbleed methods (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/cpu: Clean up SRSO return thunk mess (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/alternative: Make custom return thunk unconditional (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - objtool/x86: Fix SRSO mess (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/cpu: Fix __x86_return_thunk symbol type (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/retpoline,kprobes: Skip optprobe check for indirect jumps with retpolines and IBT (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Disable the mitigation on unaffected configurations (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/CPU/AMD: Fix the DIV(0) initial fix attempt (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/retpoline: Don't clobber RFLAGS during srso_safe_ret() (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405 (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - driver core: cpu: Fix the fallback cpu_show_gds() name (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86: Move gds_ucode_mitigated() declaration to header (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/speculation: Add cpu_show_gds() prototype (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - driver core: cpu: Make cpu_show_not_affected() static (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Fix build breakage with the LLVM linker (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - Documentation/srso: Document IBPB aspect and fix formatting (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - driver core: cpu: Unify redundant silly stubs (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - Documentation/hw-vuln: Unify filename specification in index (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/CPU/AMD: Do not leak quotient data after a division by 0 (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Tie SBPB bit setting to microcode patch detection (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Add a forgotten NOENDBR annotation (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Fix return thunks in generated code (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Add IBPB on VMEXIT (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Add IBPB (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Add SRSO_NO support (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Add IBPB_BRTYPE support (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - redhat/configs/x86: Enable CONFIG_CPU_SRSO (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/srso: Add a Speculative RAS Overflow mitigation (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/retbleed: Add __x86_return_thunk alignment checks (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/retbleed: Fix return thunk alignment (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/alternative: Optimize returns patching (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86,objtool: Separate unret validation from unwind hints (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - objtool: Add objtool_types.h (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - objtool: Union instruction::{call_dest,jump_table} (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - x86/kprobes: Fix optprobe optimization check with CONFIG_RETHUNK (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - objtool: Fix SEGFAULT (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - vmlinux.lds.h: add BOUNDED_SECTION* macros (Waiman Long) [RHEL-13879 RHEL-13880 RHEL-14114 RHEL-8594] {CVE-2023-20569}
  - ice: Don't tx before switchdev is fully configured (Michal Schmidt) [RHEL-15799 2241234]
  - wifi: rtw89: Fix loading of compressed firmware (Jose Ignacio Tornos Martinez) [RHEL-14353 RHEL-13881]
  - x86/sev: Make enc_dec_hypercall() accept a size instead of npages (Vitaly Kuznetsov) [RHEL-5757 RHEL-3904]


author: Jan Stancek <jstancek@redhat.com> [5.14.0-362.14.1.el9_3]
changelog:
  - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Florian Westphal) [RHEL-8436 RHEL-8454 RHEL-8437 RHEL-8455] {CVE-2023-42753}
  - sctp: update hb timer immediately after users change hb_interval (Xin Long) [RHEL-14301 RHEL-14179]
  - sctp: update transport state when processing a dupcook packet (Xin Long) [RHEL-14301 RHEL-14179]
  - netfilter: handle the connecting collision properly in nf_conntrack_proto_sctp (Xin Long) [RHEL-14301 RHEL-14179]
  - sctp: annotate data-races around sk->sk_wmem_queued (Xin Long) [RHEL-14301 RHEL-14179]
  - cifs: fix missing unload_nls() in smb2_reconnect() (Scott Mayhew) [RHEL-16477 RHEL-11577]
  - cifs: avoid race conditions with parallel reconnects (Scott Mayhew) [RHEL-16477 RHEL-11577]
  - cifs: update ip_addr for ses only for primary chan setup (Scott Mayhew) [RHEL-16477 RHEL-11577]
  - cifs: prevent data race in cifs_reconnect_tcon() (Scott Mayhew) [RHEL-16477 RHEL-11577]
  - cifs: prevent data race in smb2_reconnect() (Scott Mayhew) [RHEL-16477 RHEL-11577]
  - nvmet-tcp: Fix a possible UAF in queue intialization setup (John Meneghini) [RHEL-11487 RHEL-11491 RHEL-11488 RHEL-11492] {CVE-2023-5178}
  - Enable CONFIG_DPLL (Petr Oros) [RHEL-15800 2232515]
  - ice: implement dpll interface to control cgu (Petr Oros) [RHEL-15800 2232515]
  - ice: add admin commands to access cgu configuration (Petr Oros) [RHEL-15800 2232515]
  - netdev: expose DPLL pin handle for netdevice (Petr Oros) [RHEL-15800 2232515]
  - dpll: netlink: Add DPLL framework base functions (Petr Oros) [RHEL-15800 2232515]
  - dpll: core: Add DPLL framework base functions (Petr Oros) [RHEL-15800 2232515]
  - dpll: spec: Add Netlink spec in YAML (Petr Oros) [RHEL-15800 2232515]
  - dpll: documentation on DPLL subsystem interface (Petr Oros) [RHEL-15800 2232515]
  - ice: do not re-enable miscellaneous interrupt until thread_fn completes (Petr Oros) [RHEL-15806 2229762]
  - ice: trigger PFINT_OICR_TSYN_TX interrupt instead of polling (Petr Oros) [RHEL-15806 2229762]
  - ice: introduce ICE_TX_TSTAMP_WORK enumeration (Petr Oros) [RHEL-15806 2229762]
  - mm/slab_common: fix slab_caches list corruption after kmem_cache_destroy() (Rafael Aquini) [RHEL-11589 RHEL-2466]
  - sched/fair: Block nohz tick_stop when cfs bandwidth in use (Phil Auld) [RHEL-8701 2208016]
  - sched, cgroup: Restore meaning to hierarchical_quota (Phil Auld) [RHEL-8701 2208016]


author: Jan Stancek <jstancek@redhat.com> [5.14.0-362.15.1.el9_3]
changelog:
  - drm/mgag200: Flush the cache to improve latency (Jocelyn Falempe) [RHEL-16560]
  - sched/fair: Make the BW replenish timer expire in hardirq context for PREEMPT_RT (Valentin Schneider) [RHEL-16842 RHEL-7232]
  - net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Davide Caratti) [RHEL-16893 RHEL-16894 RHEL-14233 RHEL-16617] {CVE-2023-4623}
  - net/sched: sch_hfsc: Ensure inner classes have fsc curve (Davide Caratti) [RHEL-16893 RHEL-16894 RHEL-14233 RHEL-16617] {CVE-2023-4623}


author: Jan Stancek <jstancek@redhat.com> [5.14.0-362.16.1.el9_3]
changelog:
  - tracing/timerlat: Add user-space interface (Chris White) [RHEL-18927 RHEL-14932]
  - tracing/osnoise: Skip running osnoise if all instances are off (Chris White) [RHEL-18927 RHEL-14932]
  - tracing/osnoise: Switch from PF_NO_SETAFFINITY to migrate_disable (Chris White) [RHEL-18927 RHEL-14932]
  - tracing/timerlat: Always wakeup the timerlat thread (John Kacur) [RHEL-18356 RHEL-16305]
  - tracing: Rename kvfree_rcu() to kvfree_rcu_mightsleep() (John Kacur) [RHEL-18356 RHEL-16305]
  - tracing/osnoise: Fix notify new tracing_max_latency (John Kacur) [RHEL-18356 RHEL-16305]
  - tracing/timerlat: Notify new max thread latency (John Kacur) [RHEL-18356 RHEL-16305]
  - tracing/osnoise: set several trace_osnoise.c variables storage-class-specifier to static (John Kacur) [RHEL-18356 RHEL-16305]
  - trace/osnoise: make use of the helper function kthread_run_on_cpu() (John Kacur) [RHEL-18356 RHEL-16305]
  - tracing: Switch to kvfree_rcu() API (John Kacur) [RHEL-18356 RHEL-16305]
  - rcu/kvfree: Add kvfree_rcu_mightsleep() and kfree_rcu_mightsleep() (Waiman Long) [RHEL-18356 RHEL-16305]
  - x86/sev: Check for user-space IOIO pointing to kernel space (Paolo Bonzini) [RHEL-18089 RHEL-18090 RHEL-14980 RHEL-14981] {CVE-2023-46813}
  - x86/sev: Check IOBM for IOIO exceptions from user-space (Paolo Bonzini) [RHEL-18089 RHEL-18090 RHEL-14980 RHEL-14981] {CVE-2023-46813}
  - x86/sev: Disable MMIO emulation from user mode (Paolo Bonzini) [RHEL-18089 RHEL-18090 RHEL-14980 RHEL-14981] {CVE-2023-46813}
  - hwmon: (ina3221) Add support for channel summation disable (Steve Best) [RHEL-17898 RHEL-1899]
  - ice: reset first in crash dump kernels (Petr Oros) [RHEL-17613 RHEL-15698]
  - bpf: sockmap: Remove preempt_disable in sock_map_sk_acquire (Tomas Glozar) [RHEL-17571 2229975]
  - net: fix net device address assign type (Michal Schmidt) [RHEL-17279 RHEL-6368]
  - net: add check for current MAC address in dev_set_mac_address (Michal Schmidt) [RHEL-17279 RHEL-6368]
  - drm/amdgpu: Fix possible null pointer dereference (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/amdgpu: Fix possible null pointer dereference (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/vmwgfx: Keep a gem reference to user bos in surfaces (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/vmwgfx: fix typo of sizeof argument (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/vmwgfx: Fix possible invalid drm gem put calls (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/vmwgfx: Fix shader stage validation (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/vmwgfx: remove unused vmw_overlay function (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/vmwgfx: Fix Legacy Display Unit atomic drm support (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/vmwgfx: Print errors when running on broken/unsupported configs (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/vmwgfx: Drop mksstat_init_record fn as currently unused (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/vmwgfx: Fix src/dst_pitch confusion (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/vmwgfx: Replace one-element array with flexible-array member (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/vmwgfx: Do not drop the reference to the handle too soon (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/vmwgfx: Stop accessing buffer objects which failed init (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/vmwgfx: Make the driver work without the dummy resources (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/vmwgfx: Stop using raw ttm_buffer_object's (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/vmwgfx: Abstract placement selection (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/vmwgfx: Rename dummy to is_iomem (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/vmwgfx: Cleanup the vmw bo usage in the cursor paths (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/vmwgfx: Simplify fb pinning (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/vmwgfx: Rename vmw_buffer_object to vmw_bo (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/vmwgfx: Remove the duplicate bo_free function (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/vmwgfx: Use the common gem mmap instead of the custom code (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/radeon: handle NULL bo->resource in move callback (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/qxl: handle NULL bo->resource in move callback (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/gem-vram: handle NULL bo->resource in move callback (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/ttm: prevent moving of pinned BOs (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/ttm: stop allocating a dummy resource for pipelined gutting (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/ttm: stop allocating dummy resources during BO creation (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/ttm: clear the ttm_tt when bo->resource is NULL (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - drm/i915/ttm: audit remaining bo->resource (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - Revert "drm/vmwgfx: Stop accessing buffer objects which failed init" (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - Revert "drm/vmwgfx: Do not drop the reference to the handle too soon" (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}
  - Revert "drm/vmwgfx: Fix Legacy Display Unit atomic drm support" (Jocelyn Falempe) [RHEL-14511 RHEL-14515 RHEL-14512 RHEL-14516] {CVE-2023-5633}


author: Jan Stancek <jstancek@redhat.com> [5.14.0-362.17.1.el9_3]
changelog:
  - netfilter: nf_tables: skip bound chain on rule flush (Florian Westphal) [RHEL-10111 RHEL-10113 RHEL-10112 RHEL-10114] {CVE-2023-3777}
  - drivers: net: slip: fix NPD bug in sl_tx_timeout() (Michal Schmidt) [RHEL-18553 RHEL-18968 RHEL-6654 RHEL-7239] {CVE-2022-41858}
  - RDMA/core: Update CMA destination address on rdma_resolve_addr (Kamal Heib) [RHEL-19358 RHEL-19400 RHEL-6832 RHEL-7244] {CVE-2023-2176}
  - RDMA/core: Refactor rdma_bind_addr (Kamal Heib) [RHEL-19358 RHEL-19400 RHEL-6832 RHEL-7244] {CVE-2023-2176}
  - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-17263 RHEL-17265 RHEL-17264 RHEL-17266] {CVE-2023-4622}


author: Jan Stancek <jstancek@redhat.com> [5.14.0-362.18.1.el9_3]
changelog:
  - nfp: fix use-after-free in area_cache_get() (Ricardo Robaina) [RHEL-19456 RHEL-19536 RHEL-6566 RHEL-7241] {CVE-2022-3545}
  - rtla: Fix uninitialized variable found (John Kacur) [RHEL-18360 RHEL-10079]
  - rtla/timerlat: Do not stop user-space if a cpu is offline (John Kacur) [RHEL-18360 RHEL-10079]
  - rtla/timerlat_aa: Fix previous IRQ delay for IRQs that happens after thread sample (John Kacur) [RHEL-18360 RHEL-10079]
  - rtla/timerlat_aa: Fix negative IRQ delay (John Kacur) [RHEL-18360 RHEL-10079]
  - rtla/timerlat_aa: Zero thread sum after every sample analysis (John Kacur) [RHEL-18360 RHEL-10079]
  - rtla/timerlat_hist: Add timerlat user-space support (John Kacur) [RHEL-18360 RHEL-10079]
  - rtla/timerlat_top: Add timerlat user-space support (John Kacur) [RHEL-18360 RHEL-10079]
  - rtla/hwnoise: Reduce runtime to 75% (John Kacur) [RHEL-18360 RHEL-10079]
  - rtla: Start the tracers after creating all instances (John Kacur) [RHEL-18360 RHEL-10079]
  - rtla/timerlat_hist: Add auto-analysis support (John Kacur) [RHEL-18360 RHEL-10079]
  - rtla/timerlat: Give timerlat auto analysis its own instance (John Kacur) [RHEL-18360 RHEL-10079]
  - rtla: Automatically move rtla to a house-keeping cpu (John Kacur) [RHEL-18360 RHEL-10079]
  - rtla: Change monitored_cpus from char * to cpu_set_t (John Kacur) [RHEL-18360 RHEL-10079]
  - rtla: Add --house-keeping option (John Kacur) [RHEL-18360 RHEL-10079]
  - rtla: Add -C cgroup support (John Kacur) [RHEL-18360 RHEL-10079]
  - ata: ahci: Add Intel Alder Lake-P AHCI controller to low power chipsets list (Tomas Henzl) [RHEL-19394 RHEL-10941]
  - fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1106 RHEL-1109 RHEL-12930 RHEL-13899] {CVE-2023-38409}
  - fbcon: Fix error paths in set_con2fb_map (Jocelyn Falempe) [RHEL-1106 RHEL-1109 RHEL-12930 RHEL-13899] {CVE-2023-38409}
  - net: tun: fix bugs for oversize packet when napi frags enabled (Ricardo Robaina) [RHEL-12495 RHEL-12496 RHEL-7186 RHEL-7264] {CVE-2023-3812}
  - netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR (Florian Westphal) [RHEL-10536 RHEL-10538 RHEL-10537 RHEL-10539] {CVE-2023-4015}
  - md: Put the right device in md_seq_next (Nigel Croxon) [RHEL-16363 RHEL-12455]
  - dpll: sanitize possible null pointer dereference in dpll_pin_parent_pin_set() (Michal Schmidt) [RHEL-19677 RHEL-19095] {CVE-2023-6679}
  - dpll: Fix potential msg memleak when genlmsg_put_reply failed (Michal Schmidt) [RHEL-19677 RHEL-19095] {CVE-2023-6679}
  - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb (Bastien Nocera) [RHEL-19003 RHEL-2717] {CVE-2023-40283}
  - tcp: enforce receive buffer memory limits by allowing the tcp window to shrink (Felix Maurer) [RHEL-16129 RHEL-11592]
  - tcp: adjust rcv_ssthresh according to sk_reserved_mem (Felix Maurer) [RHEL-16129 RHEL-11592]
  - md: raid0: account for split bio in iostat accounting (Nigel Croxon) [RHEL-4082 RHEL-2718]
  - can: af_can: fix NULL pointer dereference in can_rcv_filter (Ricardo Robaina) [RHEL-19465 RHEL-19526 RHEL-6428 RHEL-7052] {CVE-2023-2166}


author: Jan Stancek <jstancek@redhat.com> [5.14.0-362.19.1.el9_3]
changelog:
  - redhat: fix kernel changelog entry for RHEL-16560 (Jan Stancek)
  - perf/core: Fix potential NULL deref (Wander Lairson Costa) [RHEL-18087 RHEL-18088 RHEL-14984 RHEL-14985] {CVE-2023-5717}
  - perf: Disallow mis-matched inherited group reads (Wander Lairson Costa) [RHEL-18087 RHEL-18088 RHEL-14984 RHEL-14985] {CVE-2023-5717}


author: Jan Stancek <jstancek@redhat.com> [5.14.0-362.20.1.el9_3]
changelog:
  - s390/dasd: print copy pair message only for the correct error (Tobias Huschle) [RHEL-11980 RHEL-2833]
  - x86/microcode/AMD: Rip out static buffers (David Arcari) [RHEL-14590 RHEL-10030]
  - x86/microcode/AMD: Load late on both threads too (David Arcari) [RHEL-14590 RHEL-10030]
  - x86/microcode/amd: Remove unneeded pointer arithmetic (David Arcari) [RHEL-14590 RHEL-10030]
  - x86/microcode/AMD: Get rid of __find_equiv_id() (David Arcari) [RHEL-14590 RHEL-10030]
  - docs: move x86 documentation into Documentation/arch/ (David Arcari) [RHEL-14590 RHEL-10030]
  - x86/microcode/AMD: Handle multiple glued containers properly (David Arcari) [RHEL-14590 RHEL-10030]
  - mm: Fix copy_from_user_nofault(). (Waiman Long) [RHEL-18946 RHEL-18440]
  - redhat: rewrite genlog and support Y- tags (Jan Stancek)


author: Jan Stancek <jstancek@redhat.com> [5.14.0-362.21.1.el9_3]
changelog:
  - x86/microcode: do not cache microcode if it will not be used (Paolo Bonzini) [RHEL-21567 RHEL-16225]
  - x86/hyperv: Move the code in ivm.c around to avoid unnecessary ifdef's (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - x86/hyperv: Remove hv_isolation_type_en_snp (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - x86/hyperv: Use TDX GHCI to access some MSRs in a TDX VM with the paravisor (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - Drivers: hv: vmbus: Bring the post_msg_page back for TDX VMs with the paravisor (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - x86/hyperv: Introduce a global variable hyperv_paravisor_present (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - x86/hyperv: Add missing 'inline' to hv_snp_boot_ap() stub (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - x86/hyperv: Mark hv_ghcb_terminate() as noreturn (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - Drivers: hv: vmbus: Support >64 VPs for a fully enlightened TDX/SNP VM (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - x86/hyperv: Fix serial console interrupts for fully enlightened TDX guests (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - Drivers: hv: vmbus: Support fully enlightened TDX guests (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - x86/hyperv: Support hypercalls for fully enlightened TDX guests (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - x86/hyperv: Add hv_isolation_type_tdx() to detect TDX guests (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - x86/hyperv: Fix undefined reference to isolation_type_en_snp without CONFIG_HYPERV (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - x86/hyperv: Add hyperv-specific handling for VMMCALL under SEV-ES (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - x86/hyperv: Add smp support for SEV-SNP guest (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - x86/hyperv: Add VTL specific structs and hypercalls (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - clocksource: hyper-v: Mark hyperv tsc page unencrypted in sev-snp enlightened guest (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - x86/hyperv: Use vmmcall to implement Hyper-V hypercall in sev-snp enlightened guest (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - drivers: hv: Mark percpu hvcall input arg page unencrypted in SEV-SNP enlightened guest (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - Drivers: hv: vmbus: Remove the per-CPU post_msg_page (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - x86/hyperv: Mark Hyper-V vp assist page unencrypted in SEV-SNP enlightened guest (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - x86/hyperv: Set Virtual Trust Level in VMBus init message (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - x86/hyperv: Add sev-snp enlightened guest static key (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - x86/tdx: Do not corrupt frame-pointer in __tdx_hypercall() (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - x86/tdx: Expand __tdx_hypercall() to handle more arguments (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - x86/tdx: Refactor __tdx_hypercall() to allow pass down more arguments (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - x86/tdx: Add more registers to struct tdx_hypercall_args (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - x86/tdx: Fix typo in comment in __tdx_hypercall() (Vitaly Kuznetsov) [RHEL-21441 2176350]
  - blk-mq: don't count completed flush data request as inflight in case of quiesce (Ming Lei) [RHEL-19105 RHEL-18054]
  - NFS: Use parent's objective cred in nfs_access_login_time() (Jay Shin) [RHEL-22147 RHEL-16024]
  - s390/qeth: Don't call dev_close/dev_open (DOWN/UP) (Tobias Huschle) [RHEL-17887 RHEL-2412]
  - smb: client: fix potential OOB in smb2_dump_detail() (Scott Mayhew) [RHEL-19146 RHEL-21679 RHEL-19147 RHEL-21677] {CVE-2023-6610}
  - smb: client: fix potential OOB in cifs_dump_detail() (Scott Mayhew) [RHEL-19146 RHEL-21679 RHEL-19147 RHEL-21677] {CVE-2023-6610}
  - x86/sev: Do not handle #VC for DR7 read/write (Paolo Bonzini) [RHEL-21885 RHEL-15069]
  - x86/sev: Use the GHCB protocol when available for SNP CPUID requests (Paolo Bonzini) [RHEL-21885 RHEL-15069]


author: Jan Stancek <jstancek@redhat.com> [5.14.0-362.22.1.el9_3]
changelog:
  - usb: typec: ucsi: Use GET_CAPABILITY attributes data to set power supply scope (Desnes Nunes) [RHEL-21838 RHEL-14573]
  - KVM: SVM: Do not use user return MSR support for virtualized TSC_AUX (Paolo Bonzini) [RHEL-20415 RHEL-16384]
  - KVM: SVM: Fix TSC_AUX virtualization setup (Paolo Bonzini) [RHEL-20415 RHEL-16384]
  - KVM: SVM: INTERCEPT_RDTSCP is never intercepted anyway (Paolo Bonzini) [RHEL-20415 RHEL-16384]
  - net: tls, update curr on splice as well (Sabrina Dubroca) [RHEL-22094 RHEL-22097 RHEL-19066 RHEL-19067] {CVE-2024-0646}
  - smb: client: fix OOB in smbCalcSize() (Scott Mayhew) [RHEL-21664 RHEL-21669 RHEL-18992 RHEL-18993] {CVE-2023-6606}
  - NFSv4.1: fixup use EXCHGID4_FLAG_USE_PNFS_DS for DS server (Jeffrey Layton) [RHEL-22284 RHEL-7936]
  - NFSv4.1: fix zero value filehandle in post open getattr (Jeffrey Layton) [RHEL-22284 RHEL-7936]
  - NFSv4.1: fix pnfs MDS=DS session trunking (Jeffrey Layton) [RHEL-22284 RHEL-7936]
  - NFSv4.1: use EXCHGID4_FLAG_USE_PNFS_DS for DS server (Jeffrey Layton) [RHEL-22284 RHEL-7936]
  - nvmet-tcp: Fix the H2C expected PDU len calculation (Maurizio Lombardi) [RHEL-22290 RHEL-22292 RHEL-22627 RHEL-22629 RHEL-22632 RHEL-22636 RHEL-19150 RHEL-19153 RHEL-19156 RHEL-19159 RHEL-19162 RHEL-19165] {CVE-2023-6356 CVE-2023-6535 CVE-2023-6536}
  - nvmet-tcp: remove boilerplate code (Maurizio Lombardi) [RHEL-22290 RHEL-22292 RHEL-22627 RHEL-22629 RHEL-22632 RHEL-22636 RHEL-19150 RHEL-19153 RHEL-19156 RHEL-19159 RHEL-19162 RHEL-19165] {CVE-2023-6356 CVE-2023-6535 CVE-2023-6536}
  - nvmet-tcp: fix a crash in nvmet_req_complete() (Maurizio Lombardi) [RHEL-22290 RHEL-22292 RHEL-22627 RHEL-22629 RHEL-22632 RHEL-22636 RHEL-19150 RHEL-19153 RHEL-19156 RHEL-19159 RHEL-19162 RHEL-19165] {CVE-2023-6356 CVE-2023-6535 CVE-2023-6536}
  - nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length (Maurizio Lombardi) [RHEL-22290 RHEL-22292 RHEL-22627 RHEL-22629 RHEL-22632 RHEL-22636 RHEL-19150 RHEL-19153 RHEL-19156 RHEL-19159 RHEL-19162 RHEL-19165] {CVE-2023-6356 CVE-2023-6535 CVE-2023-6536}
  - ice: dpll: fix phase offset value (Petr Oros) [RHEL-17652 RHEL-15789]
  - dpll: netlink/core: change pin frequency set behavior (Petr Oros) [RHEL-17652 RHEL-15789]
  - ice: dpll: implement phase related callbacks (Petr Oros) [RHEL-17652 RHEL-15789]
  - dpll: netlink/core: add support for pin-dpll signal phase offset/adjust (Petr Oros) [RHEL-17652 RHEL-15789]
  - dpll: spec: add support for pin-dpll signal phase offset/adjust (Petr Oros) [RHEL-17652 RHEL-15789]
  - dpll: docs: add support for pin signal phase offset/adjust (Petr Oros) [RHEL-17652 RHEL-15789]
  - netlink: specs: remove redundant type keys from attributes in subsets (Petr Oros) [RHEL-17652 RHEL-15789]
  - md/raid6: use valid sector values to determine if an I/O should wait on the reshape (Nigel Croxon) [RHEL-20933 RHEL-17276]


author: Jan Stancek <jstancek@redhat.com> [5.14.0-362.23.1.el9_3]
changelog:
  - iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range (Jerry Snitselaar) [RHEL-19382 RHEL-11590]
  - arm64/smmu: use TLBI ASID when invalidating entire range (Jerry Snitselaar) [RHEL-19382 RHEL-11590]
  - netfilter: nft_set_pipapo: skip inactive elements during set walk (Florian Westphal) [RHEL-20701 RHEL-20709 RHEL-19722 RHEL-19961] {CVE-2023-6817}
  - netfilter: nf_tables: split async and sync catchall in two functions (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: remove catchall element in GC sync path (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: expose opaque set element as struct nft_elem_priv (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: set backend .flush always succeeds (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nft_set_pipapo: no need to call pipapo_deactivate() from flush (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: work around newrule after chain binding (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: nft_set_rbtree: fix spurious insertion failure (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: fix memleak when more than 255 elements expired (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: disable toggling dormant table state more than once (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: disallow element removal on anonymous sets (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nft_set_hash: try later when GC hits EAGAIN on iteration (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nft_set_pipapo: stop GC iteration if GC transaction allocation fails (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nft_set_rbtree: use read spinlock to avoid datapath contention (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nft_set_pipapo: call nft_trans_gc_queue_sync() in catchall GC (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: disallow rule removal from chain binding (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: defer gc run if previous batch is still pending (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: fix out of memory error handling (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: use correct lock to protect gc_list (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: GC transaction race with abort path (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: flush pending destroy work before netlink notifier (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nft_dynset: disallow object maps (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: GC transaction race with netns dismantle (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: fix GC transaction races with netns and netlink event exit path (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: don't fail inserts if duplicate has expired (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: deactivate catchall elements in next generation (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: fix kdoc warnings after gc rework (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: fix false-positive lockdep splat (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: remove busy mark and gc batch API (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nft_set_hash: mark set element as dead when deleting from packet path (Florian Westphal) [RHEL-22131 RHEL-22134 RHEL-1720 RHEL-1721] {CVE-2023-4244}
  - netfilter: nf_tables: adapt set backend to use GC transaction API (Florian Westphal) [RHEL-22131 RHEL-22134 RHEL-1720 RHEL-1721] {CVE-2023-4244}
  - netfilter: nft_set_rbtree: fix overlap expiration walk (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: GC transaction API to avoid race with control plane (Florian Westphal) [RHEL-22131 RHEL-22134 RHEL-1720 RHEL-1721] {CVE-2023-4244}
  - netfilter: nf_tables: don't skip expired elements during walk (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: skip bound chain in netns release path (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: fix spurious set element insertion failure (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: report use refcount overflow (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: fix underflow in chain reference counter (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: disallow timeout for anonymous sets (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: disallow updates of anonymous sets (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: reject unbound chain set before commit phase (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: reject unbound anonymous set before commit phase (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: disallow element updates of bound anonymous sets (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: fix underflow in object reference counter (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: drop map element references from preparation phase (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: validate variable length element extension (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nft_set_pipapo: .walk does not deal with generations (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: relax set/map validation checks (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: integrate pipapo into commit protocol (Florian Westphal) [RHEL-22131 RHEL-1720]
  - netfilter: nf_tables: upfront validation of data via nft_data_init() (Florian Westphal) [RHEL-22131 RHEL-1720]
  - rbd: don't move requests to the running list on errors (Ilya Dryomov) [RHEL-23863 RHEL-21939]
  - ASoC: SOF: intel: hda: Clean up link DMA for IPC3 during stop (Jaroslav Kysela) [RHEL-24033 RHEL-13724]
  - platform/x86/intel-uncore-freq: Return error on write frequency (David Arcari) [RHEL-15751 2177013]
  - platform/x86: intel-uncore-freq: Add client processors (David Arcari) [RHEL-15751 2177013]
  - platform/x86: intel-uncore-freq: add Emerald Rapids support (David Arcari) [RHEL-15751 2177013]
  - platform/x86: intel-uncore-freq: Use sysfs_emit() to instead of scnprintf() (David Arcari) [RHEL-15751 2177013]
  - platform/x86: intel-uncore-freq: Prevent driver loading in guests (David Arcari) [RHEL-15751 2177013]
  - platform/x86: intel-uncore-freq: fix uncore_freq_common_init() error codes (David Arcari) [RHEL-15751 2177013]
  - Documentation: admin-guide: pm: Document uncore frequency scaling (David Arcari) [RHEL-15751 2177013]
  - platform/x86/intel-uncore-freq: Split common and enumeration part (David Arcari) [RHEL-15751 2177013]
  - platform/x86/intel/uncore-freq: Display uncore current frequency (David Arcari) [RHEL-15751 2177013]
  - platform/x86/intel/uncore-freq: Use sysfs API to create attributes (David Arcari) [RHEL-15751 2177013]
  - platform/x86/intel/uncore-freq: Move to uncore-frequency folder (David Arcari) [RHEL-15751 2177013]
  - platform/x86: intel-uncore-frequency: use default_groups in kobj_type (David Arcari) [RHEL-15751 2177013]
  - platform/x86: intel-uncore-frequency: Move to intel sub-directory (David Arcari) [RHEL-15751 2177013]
  - Revert "platform/x86: intel-uncore-freq: add Emerald Rapids support" (David Arcari) [RHEL-15751 2177013]
  - iommu/iova: Manage the depot list size (Jay Shin) [RHEL-21517 RHEL-11148]
  - iommu/iova: Make the rcache depot scale better (Jay Shin) [RHEL-21517 RHEL-11148]
  - drm/amd/pm: Fix error of MACO flag setting code (Michel Dänzer) [RHEL-16741 RHEL-16742 RHEL-14571 RHEL-15927]
  - drm/amd: Fix detection of _PR3 on the PCIe root port (Michel Dänzer) [RHEL-16741 RHEL-16742 RHEL-14571 RHEL-15927]


author: Jan Stancek <jstancek@redhat.com> [5.14.0-362.24.1.el9_3]
changelog:
  - RDMA/mlx5: Fix assigning access flags to cache mkeys (Mohammad Kabat) [RHEL-25242 RHEL-882]
  - drm/amdgpu: Fix potential fence use-after-free v2 (Jan Stancek) [RHEL-24501 RHEL-24504 RHEL-22506 RHEL-22507] {CVE-2023-51042}
  - ceph: defer stopping mdsc delayed_work (Xiubo Li) [RHEL-22256 RHEL-16415]
  - ceph: never send metrics if disable_send_metrics is set (Xiubo Li) [RHEL-22256 RHEL-16415]
  - ceph: don't let check_caps skip sending responses for revoke msgs (Xiubo Li) [RHEL-22256 RHEL-16415]
  - ceph: issue a cap release immediately if no cap exists (Xiubo Li) [RHEL-22256 RHEL-16415]
  - ceph: trigger to flush the buffer when making snapshot (Xiubo Li) [RHEL-22256 RHEL-16415]
  - ceph: fix blindly expanding the readahead windows (Xiubo Li) [RHEL-22256 RHEL-16415]
  - ceph: add a dedicated private data for netfs rreq (Xiubo Li) [RHEL-22256 RHEL-16415]
  - ceph: voluntarily drop Xx caps for requests those touch parent mtime (Xiubo Li) [RHEL-22256 RHEL-16415]
  - ceph: try to dump the msgs when decoding fails (Xiubo Li) [RHEL-22256 RHEL-16415]
  - ceph: only send metrics when the MDS rank is ready (Xiubo Li) [RHEL-22256 RHEL-16415]
  - x86/boot: Ignore NMIs during very early boot (Derek Barbosa) [RHEL-24449 RHEL-9380]
  - Documentation, mm/unaccepted: document accept_memory kernel parameter (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - proc/kcore: do not try to access unaccepted memory (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi/unaccepted: do not let /proc/vmcore try to access unaccepted memory (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/traps: Fix load_unaligned_zeropad() handling for shared TDX memory (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi/unaccepted: Fix off-by-one when checking for overlapping ranges (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/tdx: Zero out the missing RSI in TDX_HYPERCALL macro (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/kvm: Do not try to disable kvmclock if it was not enabled (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/tdx: Mark TSC reliable (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - RHEL: kABI fixup for struct zone (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - RHEL: introduce NR_VM_ZONE_STAT_ITEMS_ACTUAL for kABI-preserving zone stats (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - RHEL: 9.3 kABI fixup for struct efi (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/mm: Fix enc_status_change_finish_noop() (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/tdx: Fix race between set_memory_encrypted() and load_unaligned_zeropad() (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/mm: Allow guest.enc_status_change_prepare() to fail (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/coco: Mark cc_platform_has() and descendants noinstr (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - virt: sevguest: Add CONFIG_CRYPTO dependency (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - mm/page_alloc: make deferred page init free pages in MAX_ORDER blocks (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - mm/page_alloc: fix obsolete comment in deferred_pfn_valid() (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/sev: Change npages to unsigned long in snp_accept_memory() (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi/unaccepted: Fix soft lockups caused by parallel memory acceptance (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi/unaccepted: Make sure unaccepted table is mapped (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/efi: Safely enable unaccepted memory in UEFI (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/sev: Add SNP-specific unaccepted memory support (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/sev: Use large PSC requests if applicable (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/sev: Allow for use of the early boot GHCB for PSC requests (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/sev: Put PSC struct on the stack in prep for unaccepted memory support (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/sev: Fix calculation of end address based on number of pages (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/tdx: Wrap exit reason with hcall_func() (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/tdx: Add unaccepted memory support (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/tdx: Refactor try_accept_one() (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi/unaccepted: Avoid load_unaligned_zeropad() stepping into unaccepted memory (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi: Add unaccepted memory support (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/boot/compressed: Handle unaccepted memory (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi/unaccepted: Use ACPI reclaim memory for unaccepted memory table (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi/libstub: Implement support for unaccepted memory (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi/x86: Get full memory map in allocate_e820() (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - memblock tests: Fix compilation errors. (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - mm: Add support for unaccepted memory (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/boot: Centralize __pa()/__va() definitions (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/boot: Add an efi.h header for the decompressor (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/tdx: Make _tdx_hypercall() and __tdx_module_call() available in boot stub (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/tdx: Drop flags from __tdx_hypercall() (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/tdx: Disable NOTIFY_ENABLES (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/tdx: Relax SEPT_VE_DISABLE check for debug TD (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/tdx: Use ReportFatalError to report missing SEPT_VE_DISABLE (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - cpuidle, tdx: Make TDX code noinstr clean (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/tdx: Remove TDX_HCALL_ISSUE_STI (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - mm: add pageblock_aligned() macro (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi: memmap: Disregard bogus entries instead of returning them (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi: memmap: Move manipulation routines into x86 arch tree (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi: memmap: Move EFI fake memmap support into x86 arch tree (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi: libstub: install boot-time memory map as config table (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi: libstub: remove DT dependency from generic stub (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi: libstub: unify initrd loading between architectures (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi: libstub: remove pointless goto kludge (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi: libstub: simplify efi_get_memory_map() and struct efi_boot_memmap (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi: libstub: avoid efi_get_memory_map() for allocating the virt map (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi: libstub: drop pointless get_memory_map() call (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi/libstub: move efi_system_table global var into separate object (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi/x86: libstub: remove unused variable (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi: Correct comment on efi_memmap_alloc (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - drivers: fix typo in firmware/efi/memmap.c (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - netfilter: nf_tables: skip set commit for deleted/destroyed sets (Phil Sutter) [RHEL-20683 RHEL-20686 RHEL-20214 RHEL-20217] {CVE-2024-0193}
  - redhat: add missing -rt JIRAs (Jan Stancek)


author: Jan Stancek <jstancek@redhat.com> [5.14.0-362.1.1.el9_3]
changelog:
  - dlm: fix plock lookup when using multiple lockspaces (Alexander Aring) [2234868]
  - redhat: enable zstream release numbering for rhel 9.3 (Jan Stancek)
  - redhat: change default dist suffix for RHEL 9.3 (Jan Stancek)
  - thunderbolt: Fix Thunderbolt 3 display flickering issue on 2nd hot plug onwards (Desnes Nunes) [2233967]
  - Revert "firmware: raspberrypi: Fix a leak in 'rpi_firmware_get()'" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Relax base protocol sanity checks on the protocol list" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Fix incorrect error propagation in scmi_voltage_descriptors_get" (Lenny Szubowicz) [2234390]
  - Revert "pstore: Add priv field to pstore_record for backend specific use" (Lenny Szubowicz) [2234390]
  - Revert "efi: vars: Don't drop lock in the middle of efivar_init()" (Lenny Szubowicz) [2234390]
  - Revert "efi: vars: Add thin wrapper around EFI get/set variable interface" (Lenny Szubowicz) [2234390]
  - Revert "efi: pstore: Omit efivars caching EFI varstore access layer" (Lenny Szubowicz) [2234390]
  - Revert "efi: vars: Use locking version to iterate over efivars linked lists" (Lenny Szubowicz) [2234390]
  - Revert "efi: vars: Drop __efivar_entry_iter() helper which is no longer used" (Lenny Szubowicz) [2234390]
  - Revert "efi: vars: Remove deprecated 'efivars' sysfs interface" (Lenny Szubowicz) [2234390]
  - Revert "efi: vars: Switch to new wrapper layer" (Lenny Szubowicz) [2234390]
  - Revert "efi: avoid efivars layer when loading SSDTs from variables" (Lenny Szubowicz) [2234390]
  - Revert "efi: vars: Move efivar caching layer into efivarfs" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Add SCMI v3.1 System Power extensions" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Add devm_protocol_acquire helper" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Add SCMI System Power Control driver" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Add SCMI v3.1 powercap protocol basic support" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Generalize the fast channel support" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Add SCMI v3.1 powercap fast channels support" (Lenny Szubowicz) [2234390]
  - Revert "include: trace: Add SCMI fast channel tracing" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Use fast channel tracing" (Lenny Szubowicz) [2234390]
  - Revert "efi: Fix efi_power_off() not being run before acpi_power_off() when necessary" (Lenny Szubowicz) [2234390]
  - Revert "cpufreq: scmi: Use .register_em() to register with energy model" (Lenny Szubowicz) [2234390]
  - Revert "cpufreq: scmi: Support the power scale in micro-Watts in SCMI v3.1" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Get detailed power scale from perf" (Lenny Szubowicz) [2234390]
  - Revert "firmware: dmi: Use the proper accessor for the version field" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Fix missing kernel-doc in optee" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Improve checks in the info_get operations" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Harden accesses to the sensor domains" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Harden accesses to the reset domains" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Fix the asynchronous reset requests" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Add SCMI PM driver remove routine" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Disable struct randomization" (Lenny Szubowicz) [2234390]
  - Revert "efi/x86: libstub: remove unused variable" (Lenny Szubowicz) [2234390]
  - Revert "efi: capsule-loader: Fix use-after-free in efi_capsule_write" (Lenny Szubowicz) [2234390]
  - Revert "efi/libstub: add some missing EFI prototypes" (Lenny Szubowicz) [2234390]
  - Revert "efi/libstub: use EFI provided memcpy/memset routines" (Lenny Szubowicz) [2234390]
  - Revert "efi/libstub: move efi_system_table global var into separate object" (Lenny Szubowicz) [2234390]
  - Revert "efi/dev-path-parser: Refactor _UID handling to use acpi_dev_uid_to_integer()" (Lenny Szubowicz) [2234390]
  - Revert "efi/libstub: implement generic EFI zboot" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: fix type confusion for load_options_size" (Lenny Szubowicz) [2234390]
  - Revert "efi: efibc: avoid efivar API for setting variables" (Lenny Szubowicz) [2234390]
  - Revert "efi: efibc: Guard against allocation failure" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: drop pointless get_memory_map() call" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: check Shim mode using MokSBStateRT" (Lenny Szubowicz) [2234390]
  - Revert "Revert "firmware: arm_scmi: Add clock management to the SCMI power domain"" (Lenny Szubowicz) [2234390]
  - Revert "firmware: dmi: Fortify entry point length checks" (Lenny Szubowicz) [2234390]
  - Revert "psci: Fix the function type for psci_initcall_t" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: avoid efi_get_memory_map() for allocating the virt map" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: simplify efi_get_memory_map() and struct efi_boot_memmap" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: remove pointless goto kludge" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: unify initrd loading between architectures" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: remove DT dependency from generic stub" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: install boot-time memory map as config table" (Lenny Szubowicz) [2234390]
  - Revert "efi/libstub: refactor the initrd measuring functions" (Lenny Szubowicz) [2234390]
  - Revert "efi/libstub: measure EFI LoadOptions" (Lenny Szubowicz) [2234390]
  - Revert "efi/arm: libstub: move ARM specific code out of generic routines" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: fix up the last remaining open coded boot service call" (Lenny Szubowicz) [2234390]
  - Revert "efi: zboot: create MemoryMapped() device path for the parent if needed" (Lenny Szubowicz) [2234390]
  - Revert "efi/arm64: libstub: avoid SetVirtualAddressMap() when possible" (Lenny Szubowicz) [2234390]
  - Revert "firmware: raspberrypi: Use dev_err_probe() to simplify code" (Lenny Szubowicz) [2234390]
  - Revert "efi: pstore: Follow convention for the efi-pstore backend name" (Lenny Szubowicz) [2234390]
  - Revert "efi/cper: Export several helpers for ghes_edac to use" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Remove zboot signing from build options" (Lenny Szubowicz) [2234390]
  - Revert "efi: ssdt: Don't free memory if ACPI table was loaded successfully" (Lenny Szubowicz) [2234390]
  - Revert "efi: efivars: Fix variable writes without query_variable_store()" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Give efi_main() asmlinkage qualification" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Fix incorrect payload size in zboot header" (Lenny Szubowicz) [2234390]
  - Revert "efi: runtime: Don't assume virtual mappings are missing if VA == PA == 0" (Lenny Szubowicz) [2234390]
  - Revert "firmware: imx: scu-pd: add missed USB_1_PHY pd" (Lenny Szubowicz) [2234390]
  - Revert "efi: random: reduce seed size to 32 bytes" (Lenny Szubowicz) [2234390]
  - Revert "efi: random: Use 'ACPI reclaim' memory for random seed" (Lenny Szubowicz) [2234390]
  - Revert "firmware: raspberrypi: Introduce rpi_firmware_find_node()" (Lenny Szubowicz) [2234390]
  - Revert "firmware: ti_sci: Switch transport to polled mode during system suspend" (Lenny Szubowicz) [2234390]
  - Revert "firmware: ti_sci: Use the bitmap API to allocate bitmaps" (Lenny Szubowicz) [2234390]
  - Revert "firmware: ti_sci: Use the non-atomic bitmap API when applicable" (Lenny Szubowicz) [2234390]
  - Revert "firmware: ti_sci: Fix polled mode during system suspend" (Lenny Szubowicz) [2234390]
  - Revert "efi: efivars: Fix variable writes with unsupported query_variable_store()" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Cleanup the core driver removal callback" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Suppress the driver's bind attributes" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Fix devres allocation device in virtio transport" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Fix deferred_tx_wq release on error paths" (Lenny Szubowicz) [2234390]
  - Revert "firmware: ti_sci: Use devm_bitmap_zalloc when applicable" (Lenny Szubowicz) [2234390]
  - Revert "ARM: 9255/1: efi/dump UEFI runtime page tables for ARM" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Drop randomization of runtime memory map" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Drop handling of EFI properties table" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Deduplicate ftrace command line argument filtering" (Lenny Szubowicz) [2234390]
  - Revert "arm64: efi: Move dcache cleaning of loaded image out of efi_enter_kernel()" (Lenny Szubowicz) [2234390]
  - Revert "arm64: efi: Avoid dcache_clean_poc() altogether in efi_enter_kernel()" (Lenny Szubowicz) [2234390]
  - Revert "arm64: efi: Move efi-entry.S into the libstub source directory" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Use local strncmp() implementation unconditionally" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Clone memcmp() into the stub" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Enable efi_printk() in zboot decompressor" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Move screen_info handling to common code" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Provide local implementations of strrchr() and memchr()" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Factor out EFI stub entrypoint into separate file" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Add image code and data size to the zimage metadata" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Factor out min alignment and preferred kernel load address" (Lenny Szubowicz) [2234390]
  - Revert "efi/arm64: libstub: Split off kernel image relocation for builtin stub" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Merge zboot decompressor with the ordinary stub" (Lenny Szubowicz) [2234390]
  - Revert "arm64: unwind: add asynchronous unwind tables to kernel and modules" (Lenny Szubowicz) [2234390]
  - Revert "arm64: efi: Force the use of SetVirtualAddressMap() on Altra machines" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: use EFI_LOADER_CODE region when moving the kernel in memory" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Implement devicepath support for initrd commandline loader" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Permit mixed mode return types other than efi_status_t" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Add mixed mode support to command line initrd loader" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Undeprecate the command line initrd loader" (Lenny Szubowicz) [2234390]
  - Revert "efi: memmap: Move EFI fake memmap support into x86 arch tree" (Lenny Szubowicz) [2234390]
  - Revert "efi: Correct comment on efi_memmap_alloc" (Lenny Szubowicz) [2234390]
  - Revert "drivers: fix typo in firmware/efi/memmap.c" (Lenny Szubowicz) [2234390]
  - Revert "efi: memmap: Move manipulation routines into x86 arch tree" (Lenny Szubowicz) [2234390]
  - Revert "efi: pstore: Add module parameter for setting the record size" (Lenny Szubowicz) [2234390]
  - Revert "efi: random: combine bootloader provided RNG seed with RNG protocol output" (Lenny Szubowicz) [2234390]
  - Revert "firmware: raspberrypi: fix possible memory leak in rpi_firmware_probe()" (Lenny Szubowicz) [2234390]
  - Revert "efi: stub: use random seed from EFI variable" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Always enable initrd command line loader and bump version" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_ffa: Move constants to header file" (Lenny Szubowicz) [2234390]
  - Revert "efi: Put Linux specific magic number in the DOS header" (Lenny Szubowicz) [2234390]
  - Revert "efi: fix NULL-deref in init error path" (Lenny Szubowicz) [2234390]
  - Revert "efi: fix userspace infinite retry read efivars after EFI runtime services page fault" (Lenny Szubowicz) [2234390]
  - Revert "firmware/sysfb: Fix EFI/VESA format selection" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Clear stale xfer->hdr.status" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Harden shared memory access in fetch_response" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Harden shared memory access in fetch_notification" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Fix virtio channels cleanup on shutdown" (Lenny Szubowicz) [2234390]
  - Revert "efi/earlycon: Replace open coded strnchrnul()" (Lenny Szubowicz) [2234390]
  - Revert "firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle" (Lenny Szubowicz) [2234390]
  - Revert "efi: memmap: Disregard bogus entries instead of returning them" (Lenny Szubowicz) [2234390]
  - Revert "efi: verify that variable services are supported" (Lenny Szubowicz) [2234390]
  - Revert "efi: efivars: prevent double registration" (Lenny Szubowicz) [2234390]
  - Revert "efi/libstub: Add memory attribute protocol definitions" (Lenny Szubowicz) [2234390]
  - Revert "efi: Accept version 2 of memory attributes table" (Lenny Szubowicz) [2234390]
  - Revert "efi: fix potential NULL deref in efi_mem_reserve_persistent" (Lenny Szubowicz) [2234390]
  - Revert "efi: zboot: Use EFI protocol to remap code/data with the right attributes" (Lenny Szubowicz) [2234390]
  - Revert "efi: Use standard format for printing the EFI revision" (Lenny Szubowicz) [2234390]
  - Revert "efi: Discover BTI support in runtime services regions" (Lenny Szubowicz) [2234390]
  - Revert "arm64: efi: Force the use of SetVirtualAddressMap() on eMAG and Altra Max machines" (Lenny Szubowicz) [2234390]
  - Revert "efi/libstub: zboot: Mark zboot EFI application as NX compatible" (Lenny Szubowicz) [2234390]
  - Revert "efi: earlycon: Reprobe after parsing config tables" (Lenny Szubowicz) [2234390]
  - Revert "efi/libstub: smbios: Use length member instead of record struct size" (Lenny Szubowicz) [2234390]
  - Revert "arm64: efi: Use SMBIOS processor version to key off Ampere quirk" (Lenny Szubowicz) [2234390]
  - Revert "efi/libstub: smbios: Drop unused 'recsize' parameter" (Lenny Szubowicz) [2234390]
  - Revert "efi: sysfb_efi: Fix DMI quirks not working for simpledrm" (Lenny Szubowicz) [2234390]
  - Revert "efi/libstub: zboot: Add compressed image to make targets" (Lenny Szubowicz) [2234390]
  - Revert "efi/libstub: randomalloc: Return EFI_OUT_OF_RESOURCES on failure" (Lenny Szubowicz) [2234390]
  - Revert "efi: Bump stub image version for macOS HVF compatibility" (Lenny Szubowicz) [2234390]
  - Revert "firmware/sysfb: Fix VESA format selection" (Lenny Szubowicz) [2234390]
  - Revert "redhat/configs: update firmware configs" (Lenny Szubowicz) [2234390]
  - Revert "ACPI: power: Switch to sys-off handler API" (Lenny Szubowicz) [2234390]
  - Revert "gsmi: fix null-deref in gsmi_get_variable" (Lenny Szubowicz) [2234390]
  - Revert "efi: efivars: drop kobject from efivars_register()" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: fix efi_load_initrd_dev_path() kernel-doc comment" (Lenny Szubowicz) [2234390]
  - Revert "notifier: Add atomic_notifier_call_chain_is_empty()" (Lenny Szubowicz) [2234390]
  - Revert "kernel/reboot: Wrap legacy power-off callbacks into sys-off handlers" (Lenny Szubowicz) [2234390]
  - Revert "kernel/reboot: Add do_kernel_power_off()" (Lenny Szubowicz) [2234390]
  - Revert "kernel/reboot: Add stub for pm_power_off" (Lenny Szubowicz) [2234390]
  - Revert "kernel/reboot: Add kernel_can_power_off()" (Lenny Szubowicz) [2234390]
  - Revert "kernel/reboot: Add register_platform_power_off()" (Lenny Szubowicz) [2234390]
  - Revert "reboot: Remove pm_power_off_prepare()" (Lenny Szubowicz) [2234390]
  - Revert "kernel/reboot: Change registration order of legacy power-off handler" (Lenny Szubowicz) [2234390]
  - Revert "kernel/reboot: Use static handler for register_platform_power_off()" (Lenny Szubowicz) [2234390]
  - Revert "kernel/reboot: Fix powering off using a non-syscall code paths" (Lenny Szubowicz) [2234390]
  - Revert "PM: hibernate: Use kernel_can_power_off()" (Lenny Szubowicz) [2234390]
  - x86/cpu: Enable STIBP on AMD if Automatic IBRS is enabled (Waiman Long) [2227917]
  - Documentation/hw-vuln: Document the interaction between IBRS and STIBP (Waiman Long) [2227917]
  - x86/CPU/AMD: Make sure EFER[AIBRSE] is set (Waiman Long) [2227917]
  - sched/core: Use empty mask to reset cpumasks in sched_setaffinity() (Waiman Long) [2219681]
  - cgroup/cpuset: Extend test_cpuset_prs.sh to test remote partition (Waiman Long) [2174568]
  - cgroup/cpuset: Documentation update for partition (Waiman Long) [2174568]
  - cgroup/cpuset: Check partition conflict with housekeeping setup (Waiman Long) [2174568]
  - cgroup/cpuset: Introduce remote partition (Waiman Long) [2174568]
  - cgroup/cpuset: Add cpuset.cpus.exclusive for v2 (Waiman Long) [2174568]
  - cgroup/cpuset: Add cpuset.cpus.exclusive.effective for v2 (Waiman Long) [2174568]
  - cgroup/cpuset: simplify the percpu kthreads check in update_tasks_cpumask() (Waiman Long) [2174568]
  - cgroup/cpuset: Allow suppression of sched domain rebuild in update_cpumasks_hier() (Waiman Long) [2174568]
  - cgroup/cpuset: Improve temporary cpumasks handling (Waiman Long) [2174568]
  - cgroup/cpuset: Extract out CS_CPU_EXCLUSIVE & CS_SCHED_LOAD_BALANCE handling (Waiman Long) [2174568]
  - cgroup/cpuset: Inherit parent's load balance state in v2 (Waiman Long) [2174568]
  - cgroup/cpuset: Free DL BW in case can_attach() fails (Waiman Long) [2174568]
  - sched/deadline: Create DL BW alloc, free & check overflow interface (Waiman Long) [2174568]
  - cgroup/cpuset: Iterate only if DEADLINE tasks are present (Waiman Long) [2174568]
  - sched/cpuset: Keep track of SCHED_DEADLINE task in cpusets (Waiman Long) [2174568]
  - sched/cpuset: Bring back cpuset_mutex (Waiman Long) [2174568]
  - cgroup/cpuset: Rename functions dealing with DEADLINE accounting (Waiman Long) [2174568]
  - cgroup/cpuset: Minor updates to test_cpuset_prs.sh (Waiman Long) [2174568]
  - cgroup/cpuset: Include offline CPUs when tasks' cpumasks in top_cpuset are updated (Waiman Long) [2174568]
  - cgroup/cpuset: Skip task update if hotplug doesn't affect current cpuset (Waiman Long) [2174568]
  - kselftest/cgroup: Add cleanup() to test_cpuset_prs.sh (Waiman Long) [2174568]
  - kselftest/cgroup: Fix gathering number of CPUs (Waiman Long) [2174568]
  - redhat: configs: Disable CONFIG_CRYPTO_STATS since performance issue for storage (Herbert Xu) [2227964]
  - redhat: list Z-Jiras in the changelog before Y-Jiras (Herton R. Krzesinski)


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.6.1.el9_4]
changelog:
  - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Daniel Vacek) [RHEL-26063]
  - ASoC: Intel: soc-acpi: rt713+rt1316, no sdw-dmic config (Jaroslav Kysela) [RHEL-26456]
  - hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed (Maxim Levitsky) [RHEL-26435]
  - hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove (Maxim Levitsky) [RHEL-26435]
  - mlxsw: spectrum_acl_tcam: Fix stack corruption (Ivan Vecera) [RHEL-26463 RHEL-26465] {CVE-2024-26586}


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.7.1.el9_4]
changelog:
  - NFS: Read unlock folio on nfs_page_create_from_folio() error (Benjamin Coddington) [RHEL-18029]
  - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-15701]
  - i40e: Fix firmware version comparison function (Ivan Vecera) [RHEL-15701]
  - i40e: disable NAPI right after disabling irqs when handling xsk_pool (Ivan Vecera) [RHEL-15701]
  - i40e: take into account XDP Tx queues when stopping rings (Ivan Vecera) [RHEL-15701]
  - i40e: avoid double calling i40e_pf_rxq_wait() (Ivan Vecera) [RHEL-15701]
  - i40e: Fix wrong mask used during DCB config (Ivan Vecera) [RHEL-15701]
  - i40e: Fix waiting for queues of all VSIs to be disabled (Ivan Vecera) [RHEL-15701]
  - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-15701]
  - net: intel: fix old compiler regressions (Ivan Vecera) [RHEL-15701]
  - i40e: update xdp_rxq_info::frag_size for ZC enabled Rx queue (Ivan Vecera) [RHEL-15701]
  - i40e: set xdp_rxq_info::frag_size (Ivan Vecera) [RHEL-15701]
  - intel: xsk: initialize skb_frag_t::bv_offset in ZC drivers (Ivan Vecera) [RHEL-15701]
  - i40e: handle multi-buffer packets that are shrunk by xdp prog (Ivan Vecera) [RHEL-15701]
  - i40e: Include types.h to some headers (Ivan Vecera) [RHEL-15701]
  - i40e: Restore VF MSI-X state during PCI reset (Ivan Vecera) [RHEL-15701]
  - i40e: fix use-after-free in i40e_aqc_add_filters() (Ivan Vecera) [RHEL-15701]
  - i40e: Avoid unnecessary use of comma operator (Ivan Vecera) [RHEL-15701]
  - i40e: Fix VF disable behavior to block all traffic (Ivan Vecera) [RHEL-15701]
  - i40e: Fix filter input checks to prevent config with invalid values (Ivan Vecera) [RHEL-15701]
  - i40e: field get conversion (Ivan Vecera) [RHEL-15701]
  - i40e: field prep conversion (Ivan Vecera) [RHEL-15701]
  - intel: add bit macro includes where needed (Ivan Vecera) [RHEL-15701]
  - i40e: remove fake support of rx-frames-irq (Ivan Vecera) [RHEL-15701]
  - i40e: Fix ST code value for Clause 45 (Ivan Vecera) [RHEL-15701]
  - i40e: Fix unexpected MFS warning message (Ivan Vecera) [RHEL-15701]
  - i40e: Remove queue tracking fields from i40e_adminq_ring (Ivan Vecera) [RHEL-15701]
  - i40e: Remove AQ register definitions for VF types (Ivan Vecera) [RHEL-15701]
  - i40e: Delete unused and useless i40e_pf fields (Ivan Vecera) [RHEL-15701]
  - i40e: Fix adding unsupported cloud filters (Ivan Vecera) [RHEL-15701]
  - i40e: Delete unused i40e_mac_info fields (Ivan Vecera) [RHEL-15701]
  - i40e: Move inline helpers to i40e_prototype.h (Ivan Vecera) [RHEL-15701]
  - i40e: Remove VF MAC types (Ivan Vecera) [RHEL-15701]
  - i40e: Use helpers to check running FW and AQ API versions (Ivan Vecera) [RHEL-15701]
  - i40e: Add other helpers to check version of running firmware and AQ API (Ivan Vecera) [RHEL-15701]
  - i40e: Move i40e_is_aq_api_ver_ge helper (Ivan Vecera) [RHEL-15701]
  - i40e: Initialize hardware capabilities at single place (Ivan Vecera) [RHEL-15701]
  - i40e: Consolidate hardware capabilities (Ivan Vecera) [RHEL-15701]
  - i40e: Use DECLARE_BITMAP for flags field in i40e_hw (Ivan Vecera) [RHEL-15701]
  - i40e: Use DECLARE_BITMAP for flags and hw_features fields in i40e_pf (Ivan Vecera) [RHEL-15701]
  - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-15701]
  - i40e: Remove unused flags (Ivan Vecera) [RHEL-15701]
  - i40e: add an error code check in i40e_vsi_setup (Ivan Vecera) [RHEL-15701]
  - i40e: increase max descriptors for XL710 (Ivan Vecera) [RHEL-15701]
  - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (Ivan Vecera) [RHEL-15701]
  - i40e: sync next_to_clean and next_to_process for programming status desc (Ivan Vecera) [RHEL-15701]
  - i40e: Fix I40E_FLAG_VF_VLAN_PRUNING value (Ivan Vecera) [RHEL-15701]
  - i40e: xsk: remove count_mask (Ivan Vecera) [RHEL-15701]
  - i40e: use scnprintf over strncpy+strncat (Ivan Vecera) [RHEL-15701]
  - intel: fix format warnings (Ivan Vecera) [RHEL-15701]
  - i40e: Refactor and rename i40e_read_pba_string() (Ivan Vecera) [RHEL-15701]
  - i40e: Split and refactor i40e_nvm_version_str() (Ivan Vecera) [RHEL-15701]
  - i40e: prevent crash on probe if hw registers have invalid values (Ivan Vecera) [RHEL-15701]
  - i40e: Move DDP specific macros and structures to i40e_ddp.c (Ivan Vecera) [RHEL-15701]
  - i40e: Remove circular header dependencies and fix headers (Ivan Vecera) [RHEL-15701]
  - i40e: Split i40e_osdep.h (Ivan Vecera) [RHEL-15701]
  - i40e: Move memory allocation structures to i40e_alloc.h (Ivan Vecera) [RHEL-15701]
  - i40e: Simplify memory allocation functions (Ivan Vecera) [RHEL-15701]
  - i40e: Refactor I40E_MDIO_CLAUSE* macros (Ivan Vecera) [RHEL-15701]
  - i40e: Move I40E_MASK macro to i40e_register.h (Ivan Vecera) [RHEL-15701]
  - i40e: Remove back pointer from i40e_hw structure (Ivan Vecera) [RHEL-15701]
  - i40e: Add rx_missed_errors for buffer exhaustion (Ivan Vecera) [RHEL-15701]
  - net: Tree wide: Replace xdp_do_flush_map() with xdp_do_flush(). (Ivan Vecera) [RHEL-15701]
  - i40e: fix potential memory leaks in i40e_remove() (Ivan Vecera) [RHEL-15701]
  - i40e: fix potential NULL pointer dereferencing of pf->vf i40e_sync_vsi_filters() (Ivan Vecera) [RHEL-15701]
  - i40e: fix misleading debug logs (Ivan Vecera) [RHEL-15701]
  - i40e: Replace one-element array with flex-array member in struct i40e_profile_aq_section (Ivan Vecera) [RHEL-15701]
  - i40e: Replace one-element array with flex-array member in struct i40e_section_table (Ivan Vecera) [RHEL-15701]
  - i40e: Replace one-element array with flex-array member in struct i40e_profile_segment (Ivan Vecera) [RHEL-15701]
  - i40e: Replace one-element array with flex-array member in struct i40e_package_header (Ivan Vecera) [RHEL-15701]
  - i40e: Remove unused function declarations (Ivan Vecera) [RHEL-15701]
  - i40e: remove i40e_status (Ivan Vecera) [RHEL-15701]
  - i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir() (Ivan Vecera) [RHEL-15701]
  - i40e: xsk: add TX multi-buffer support (Ivan Vecera) [RHEL-15701]
  - i40e: xsk: add RX multi-buffer support (Ivan Vecera) [RHEL-15701]
  - i40e, xsk: fix comment typo (Ivan Vecera) [RHEL-15701]
  - i40e: remove unnecessary check for old MAC == new MAC (Ivan Vecera) [RHEL-15701]
  - i40e: fix i40e_setup_misc_vector() error handling (Ivan Vecera) [RHEL-15701]
  - i40e: fix accessing vsi->active_filters without holding lock (Ivan Vecera) [RHEL-15701]
  - i40e: Add support for VF to specify its primary MAC address (Ivan Vecera) [RHEL-15701]
  - i40e: fix registers dump after run ethtool adapter self test (Ivan Vecera) [RHEL-15701]
  - i40e: fix flow director packet filter programming (Ivan Vecera) [RHEL-15701]
  - i40e: add support for XDP multi-buffer Rx (Ivan Vecera) [RHEL-15701]
  - i40e: add xdp_buff to i40e_ring struct (Ivan Vecera) [RHEL-15701]
  - i40e: introduce next_to_process to i40e_ring (Ivan Vecera) [RHEL-15701]
  - i40e: use frame_sz instead of recalculating truesize for building skb (Ivan Vecera) [RHEL-15701]
  - i40e: Change size to truesize when using i40e_rx_buffer_flip() (Ivan Vecera) [RHEL-15701]
  - i40e: add pre-xdp page_count in rx_buffer (Ivan Vecera) [RHEL-15701]
  - i40e: change Rx buffer size for legacy-rx to support XDP multi-buffer (Ivan Vecera) [RHEL-15701]
  - i40e: consolidate maximum frame size calculation for vsi (Ivan Vecera) [RHEL-15701]
  - i40e: check vsi type before setting xdp_features flag (Ivan Vecera) [RHEL-15701]
  - drivers: net: turn on XDP features (Ivan Vecera) [RHEL-15701]
  - i40e: add xdp frags support to ndo_xdp_xmit (Ivan Vecera) [RHEL-15701]
  - dmaengine: idxd: Ensure safe user copy of completion record (Jerry Snitselaar) [RHEL-28511]
  - dmaengine: idxd: Remove shadow Event Log head stored in idxd (Jerry Snitselaar) [RHEL-28511]
  - dmaengine: idxd: Move dma_free_coherent() out of spinlocked context (Jerry Snitselaar) [RHEL-28511]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.8.1.el9_4]
changelog:
  - dm-integrity: align the outgoing bio in integrity_recheck (Benjamin Marzinski) [RHEL-29679]
  - dm-integrity: fix a memory leak when rechecking the data (Benjamin Marzinski) [RHEL-29679]
  - NFSv4: fairly test all delegations on a SEQ4_ revocation (Benjamin Coddington) [RHEL-7976]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.10.1.el9_4]
changelog:
  - NFS: remove sync_mode test from nfs_writepage_locked() (Jeffrey Layton) [RHEL-28630]
  - nfs: Remove writepage (Jeffrey Layton) [RHEL-28630]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.12.1.el9_4]
changelog:
  - mm/sparsemem: fix race in accessing memory_section->usage (Waiman Long) [RHEL-28877 RHEL-28878] {CVE-2023-52489}
  - Revert "[redhat] kabi: add symbol __scsi_execute to stablelist" (Ewan D. Milne) [RHEL-30725]


author: Mark Will <mark.will@oracle.com> [5.14.0-427.13.1.el9_4.OL9]
changelog:
  - Disable UKI signing [Orabug: 36571828]
  - Update Oracle Linux certificates (Kevin Lyons)
  - Disable signing for aarch64 (Ilya Okomin)
  - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
  - Update x509.genkey [Orabug: 24817676]
  - Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5.el9
  - Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
  - Add Oracle Linux IMA certificates


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.14.1.el9_4]
changelog:
  - crypto: dh - implement FIPS PCT (Vladis Dronov) [RHEL-27009 RHEL-25845]
  - crypto: tcrypt - add ffdhe2048(dh) test (Vladis Dronov) [RHEL-27009 RHEL-25845]
  - crypto: dh - Make public key test FIPS-only (Vladis Dronov) [RHEL-27009 RHEL-25845]
  - printk: allow disabling printk per-console device kthreads at boot (Luis Claudio R. Goncalves) [RHEL-30678 RHEL-17709]
  - mm, vmscan: remove ISOLATE_UNMAPPED (Nico Pache) [RHEL-29235 RHEL-28667]
  - trace-vmscan-postprocess: sync with tracepoints updates (Nico Pache) [RHEL-29235 RHEL-28667]
  - tracing: incorrect isolate_mote_t cast in mm_vmscan_lru_isolate (Nico Pache) [RHEL-29235 RHEL-28667]
  - mm/mglru: skip special VMAs in lru_gen_look_around() (Nico Pache) [RHEL-29235 RHEL-28667]
  - mm/mglru: reclaim offlined memcgs harder (Nico Pache) [RHEL-29235 RHEL-28667]
  - mm/mglru: try to stop at high watermarks (Nico Pache) [RHEL-29235 RHEL-28667]
  - mm/mglru: fix underprotected page cache (Nico Pache) [RHEL-29235 RHEL-28667]
  - mm: multi-gen LRU: reuse some legacy trace events (Nico Pache) [RHEL-29235 RHEL-28667]
  - mm: multi-gen LRU: improve design doc (Nico Pache) [RHEL-29235 RHEL-28667]
  - mm: multi-gen LRU: clean up sysfs code (Nico Pache) [RHEL-29235 RHEL-28667]
  - cpu/hotplug: Do not bail-out in DYING/STARTING sections (David Arcari) [RHEL-29673 RHEL-19514]
  - crypto: akcipher - Disable signing and decryption (Herbert Xu) [RHEL-29079 RHEL-17113] {CVE-2023-6240}


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.15.1.el9_4]
changelog:
  - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-30110 RHEL-19000]
  - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-30110 RHEL-19000]
  - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-30110 RHEL-19000]
  - crypto: iaa - mark tech preview (Vladis Dronov) [RHEL-32242 RHEL-29685]
  - crypto: iaa - Fix nr_cpus < nr_iaa case (Vladis Dronov) [RHEL-32242 RHEL-29685]
  - crypto: iaa - fix the missing CRYPTO_ALG_ASYNC in cra_flags (Vladis Dronov) [RHEL-32242 RHEL-29685]
  - crypto: iaa - Fix comp/decomp delay statistics (Vladis Dronov) [RHEL-32242 RHEL-29685]
  - crypto: iaa - Fix async_disable descriptor leak (Vladis Dronov) [RHEL-32242 RHEL-29685]
  - crypto: iaa - Remove unnecessary debugfs_create_dir() error check in iaa_crypto_debugfs_init() (Vladis Dronov) [RHEL-32242 RHEL-29685]
  - crypto: iaa - Remove header table code (Vladis Dronov) [RHEL-32242 RHEL-29685]
  - cgroup: cgroup-v1: do not exclude cgrp_dfl_root (Laurent Vivier) [RHEL-32716 RHEL-31381]
  - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30030 RHEL-30031] {CVE-2024-25743 CVE-2024-25742}


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.16.1.el9_4]
changelog:
  - memory: tegra: Skip SID programming if SID registers aren't set (Robert Foss) [RHEL-32675 RHEL-23656]
  - memory: tegra: Add SID override programming for MC clients (Robert Foss) [RHEL-32675 RHEL-23656]
  - iommu: Don't reserve 0-length IOVA region (Robert Foss) [RHEL-32675 RHEL-23656]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.17.1.el9_4]
changelog:
  - ceph: switch to use cap_delay_lock for the unlink delay list (Jay Shin) [RHEL-33003 RHEL-32997]
  - ceph: remove useless session parameter for check_caps() (Xiubo Li) [RHEL-33003 RHEL-19813]
  - ceph: flush the dirty caps immediatelly when quota is approaching (Xiubo Li) [RHEL-33003 RHEL-19813]
  - vhost: Add smp_rmb() in vhost_enable_notify() (Gavin Shan) [RHEL-31839 RHEL-26104]
  - vhost: Add smp_rmb() in vhost_vq_avail_empty() (Gavin Shan) [RHEL-31839 RHEL-26104]
  - iommu/vt-d: Support enforce_cache_coherency only for empty domains (Jerry Snitselaar) [RHEL-32793 RHEL-31083]
  - iommu/vt-d: Add MTL to quirk list to skip TE disabling (Jerry Snitselaar) [RHEL-32793 RHEL-31083]
  - iommu/vt-d: Make context clearing consistent with context mapping (Jerry Snitselaar) [RHEL-32793 RHEL-31083]
  - iommu/vt-d: Disable PCI ATS in legacy passthrough mode (Jerry Snitselaar) [RHEL-32793 RHEL-31083]
  - iommu/vt-d: Omit devTLB invalidation requests when TES=0 (Jerry Snitselaar) [RHEL-32793 RHEL-31083]
  - PCI/MSI: Prevent MSI hardware interrupt number truncation (Myron Stowe) [RHEL-33656 RHEL-21453]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.18.1.el9_4]
changelog:
  - netfilter: nf_tables: disallow anonymous set with timeout flag (Phil Sutter) [RHEL-32971 RHEL-30082] {CVE-2024-26642}
  - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (Phil Sutter) [RHEL-33070 RHEL-30078] {CVE-2024-26643}
  - netfilter: nft_ct: fix l3num expectations with inet pseudo family (Phil Sutter) [RHEL-32963 RHEL-31345] {CVE-2024-26673}
  - netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations (Phil Sutter) [RHEL-32963 RHEL-31345] {CVE-2024-26673}
  - arm64: tlb: Fix TLBI RANGE operand (Shaoqin Huang) [RHEL-33412 RHEL-26259]
  - arm64/mm: Modify range-based tlbi to decrement scale (Shaoqin Huang) [RHEL-33412 RHEL-26259]
  - rh_messages.h: mark mlx5 on Bluefield-3 as unmaintained (Scott Weaver) [RHEL-35878 RHEL-33061]
  - net: ip_tunnel: prevent perpetual headroom growth (Guillaume Nault) [RHEL-33934 RHEL-31816] {CVE-2024-26804}
  - gitlab-ci: use zstream builder container image (Michael Hofmann)
  - selftests: net: gro fwd: update vxlan GRO test expectations (Antoine Tenart) [RHEL-30910 RHEL-19729]
  - udp: prevent local UDP tunnel packets from being GROed (Antoine Tenart) [RHEL-30910 RHEL-19729]
  - udp: do not transition UDP GRO fraglist partial checksums to unnecessary (Antoine Tenart) [RHEL-30910 RHEL-19729]
  - gro: fix ownership transfer (Antoine Tenart) [RHEL-30910 RHEL-19729]
  - udp: do not accept non-tunnel GSO skbs landing in a tunnel (Antoine Tenart) [RHEL-30910 RHEL-19729]
  - bpf, tcx: Get rid of tcx_link_const (Felix Maurer) [RHEL-33062 RHEL-28590]
  - selftests/bpf: Add additional mprog query test coverage (Felix Maurer) [RHEL-33062 RHEL-28590]
  - selftests/bpf: Make seen_tc* variable tests more robust (Felix Maurer) [RHEL-33062 RHEL-28590]
  - selftests/bpf: Test query on empty mprog and pass revision into attach (Felix Maurer) [RHEL-33062 RHEL-28590]
  - selftests/bpf: Adapt assert_mprog_count to always expect 0 count (Felix Maurer) [RHEL-33062 RHEL-28590]
  - selftests/bpf: Test bpf_mprog query API via libbpf and raw syscall (Felix Maurer) [RHEL-33062 RHEL-28590]
  - selftest/bpf: Add various selftests for program limits (Felix Maurer) [RHEL-33062 RHEL-28590]
  - bpf: Refuse unused attributes in bpf_prog_{attach,detach} (Felix Maurer) [RHEL-33062 RHEL-28590]
  - bpf: Handle bpf_mprog_query with NULL entry (Felix Maurer) [RHEL-33062 RHEL-28590]
  - net: Fix skb consume leak in sch_handle_egress (Felix Maurer) [RHEL-33062 RHEL-28590]
  - selftests/bpf: Add various more tcx test cases (Felix Maurer) [RHEL-33062 RHEL-28590]
  - selftests/bpf: Add test for detachment on empty mprog entry (Felix Maurer) [RHEL-33062 RHEL-28590]
  - tcx: Fix splat during dev unregister (Felix Maurer) [RHEL-33062 RHEL-28590]
  - tcx: Fix splat in ingress_destroy upon tcx_entry_free (Felix Maurer) [RHEL-33062 RHEL-28590]
  - selftests/bpf: Add mprog API tests for BPF tcx links (Felix Maurer) [RHEL-33062 RHEL-28590]
  - selftests/bpf: Add mprog API tests for BPF tcx opts (Felix Maurer) [RHEL-33062 RHEL-28590]
  - bpf: Add fd-based tcx multi-prog infra with link support (Felix Maurer) [RHEL-33062 RHEL-28590]
  - bpftool: Implement link show support for tcx (Artem Savkov) [RHEL-33062 RHEL-23643]
  - bpftool: Extend net dump with tcx progs (Artem Savkov) [RHEL-33062 RHEL-23643]
  - bpf: fix precision backtracking instruction iteration (Jay Shin) [RHEL-35230 RHEL-23643]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.19.1.el9_4]
changelog:
  - x86/mce: Cleanup mce_usable_address() (Prarit Bhargava) [RHEL-33810 RHEL-25415]
  - x86/mce: Define amd_mce_usable_address() (Prarit Bhargava) [RHEL-33810 RHEL-25415]
  - x86/MCE/AMD: Split amd_mce_is_memory_error() (Prarit Bhargava) [RHEL-33810 RHEL-25415]
  - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Ewan D. Milne) [RHEL-35302 RHEL-35078] {CVE-2024-26993}


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.20.1.el9_4]
changelog:
  - ipv6: sr: fix possible use-after-free and null-ptr-deref (Hangbin Liu) [RHEL-33968 RHEL-31732] {CVE-2024-26735}
  - idpf: fix kernel panic on unknown packet types (Michal Schmidt) [RHEL-36145 RHEL-29035]
  - idpf: refactor some missing field get/prep conversions (Michal Schmidt) [RHEL-36145 RHEL-29035]
  - PCI: Fix pci_rh_check_status() call semantics (Luiz Capitulino) [RHEL-36541 RHEL-35032]
  - cxgb4: Properly lock TX queue for the selftest. (John B. Wyatt IV) [RHEL-36530 RHEL-31990 RHEL-9354]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.21.1.el9_4]
changelog:
  - drm/i915/display: Increase number of fast wake precharge pulses (Mika Penttilä) [RHEL-36534 RHEL-20439]
  - drm/i915/psr: Improve fast and IO wake lines calculation (Mika Penttilä) [RHEL-36534 RHEL-20439]
  - drm/i915/display: Make intel_dp_aux_fw_sync_len available for PSR code (Mika Penttilä) [RHEL-36534 RHEL-20439]
  - smb: client: improve DFS mount check (Jay Shin) [RHEL-36743 RHEL-28739]
  - net: mana: Fix Rx DMA datasize and skb_over_panic (Cathy Avery) [RHEL-37622 RHEL-9872]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.22.1.el9_4]
changelog:
  - dpll: fix dpll_pin_on_pin_register() for multiple parent pins (Petr Oros) [RHEL-36572 RHEL-32098]
  - dpll: indent DPLL option type by a tab (Petr Oros) [RHEL-36572 RHEL-32098]
  - dpll: fix dpll_xa_ref_*_del() for multiple registrations (Petr Oros) [RHEL-36572 RHEL-32098]
  - dpll: spec: use proper enum for pin capabilities attribute (Petr Oros) [RHEL-36572 RHEL-32098]
  - dpll: move all dpll<>netdev helpers to dpll code (Petr Oros) [RHEL-36572 RHEL-32098]
  - dpll: fix build failure due to rcu_dereference_check() on unknown type (Petr Oros) [RHEL-36572 RHEL-32098]
  - dpll: rely on rcu for netdev_dpll_pin() (Petr Oros) [RHEL-36572 RHEL-32098]
  - dpll: fix possible deadlock during netlink dump operation (Petr Oros) [RHEL-36572 RHEL-32098]
  - dpll: check that pin is registered in __dpll_pin_unregister() (Petr Oros) [RHEL-36572 RHEL-32098]
  - dpll: move xa_erase() call in to match dpll_pin_alloc() error path order (Petr Oros) [RHEL-36572 RHEL-32098]
  - dpll: expose fractional frequency offset value to user (Petr Oros) [RHEL-36572 RHEL-32098]
  - dpll: allocate pin ids in cycle (Petr Oros) [RHEL-36572 RHEL-32098]
  - dpll: remove leftover mode_supported() op and use mode_get() instead (Petr Oros) [RHEL-36572 RHEL-32098]
  - Documentation: dpll: wrap DPLL_CMD_PIN_GET output in a code block (Petr Oros) [RHEL-36572 RHEL-32098]
  - Documentation: dpll: Fix code blocks (Petr Oros) [RHEL-36572 RHEL-32098]
  - MAINTAINERS: adjust header file entry in DPLL SUBSYSTEM (Petr Oros) [RHEL-36572 RHEL-32098]
  - netdev: Remove unneeded semicolon (Petr Oros) [RHEL-36572 RHEL-32098]
  - netlink: add variable-length / auto integers (Petr Oros) [RHEL-36572 RHEL-30145]
  - netlink: allow be16 and be32 types in all uint policy checks (Ivan Vecera) [RHEL-36572 RHEL-30656]
  - net: netlink: recommend policy range validation (Ivan Vecera) [RHEL-36572 RHEL-30344]
  - netlink: add nla be16/32 types to minlen array (Ivan Vecera) [RHEL-36572 RHEL-30344]
  - netlink: introduce bigendian integer types (Michal Schmidt) [RHEL-36572 RHEL-30344]
  - netlink: introduce NLA_POLICY_MAX_BE (Ivan Vecera) [RHEL-36572 RHEL-30344]
  - ice: use irq_update_affinity_hint() (Michal Schmidt) [RHEL-38512 RHEL-35293]
  - x86/tsc: Defer marking TSC unstable to a worker (Wander Lairson Costa) [RHEL-9296 RHEL-19514]
  - x86/smpboot: Make TSC synchronization function call based (David Arcari) [RHEL-9296 RHEL-19514]
  - Bluetooth: hci_core: Remove le_restart_scan work (David Marlin) [RHEL-38524 RHEL-30099]
  - hwmon: (coretemp) Enlarge per package core count limit (David Arcari) [RHEL-35447 RHEL-22705]
  - hwmon: (coretemp) Fix bogus core_id to attr name mapping (David Arcari) [RHEL-35447 RHEL-22705]
  - hwmon: (coretemp) Fix out-of-bounds memory access (David Arcari) [RHEL-35447 RHEL-22705]
  - perf: arm_cspmu: Reject events meant for other PMUs (Michael Petlan) [RHEL-34991 RHEL-25824]
  - smb: client: refresh referral without acquiring refpath_lock (Jay Shin) [RHEL-38904 RHEL-7986]
  - smb: client: guarantee refcounted children from parent session (Jay Shin) [RHEL-38904 RHEL-7986]
  - smb3: show beginning time for per share stats (Jay Shin) [RHEL-38904 RHEL-31245]
  - smb: client: fix mount when dns_resolver key is not available (Jay Shin) [RHEL-38904 RHEL-31245]
  - smb: client: get rid of dfs code dep in namespace.c (Jay Shin) [RHEL-38904 RHEL-31245]
  - smb: client: get rid of dfs naming in automount code (Jay Shin) [RHEL-38904 RHEL-31245]
  - smb: client: rename cifs_dfs_ref.c to namespace.c (Jay Shin) [RHEL-38904 RHEL-31245]
  - smb: client: ensure to try all targets when finding nested links (Jay Shin) [RHEL-38904 RHEL-31245]
  - smb: client: introduce DFS_CACHE_TGT_LIST() (Jay Shin) [RHEL-38904 RHEL-31245]
  - smb: client: remove redundant pointer 'server' (Jay Shin) [RHEL-38904 RHEL-28739]
  - smb: client: fix parsing of source mount option (Jay Shin) [RHEL-38904 RHEL-28739]
  - integrity: eliminate unnecessary "Problem loading X.509 certificate" msg (Coiby Xu) [RHEL-39933 RHEL-12346]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.23.1.el9_4]
changelog:
  - net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context (Kamal Heib) [RHEL-34050 RHEL-30492] {CVE-2023-52626}
  - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-38595 RHEL-36684]
  - net/sched: flower: Add lock protection when remove filter handle (Petr Oros) [RHEL-35672 RHEL-33379]
  - Bluetooth: Avoid potential use-after-free in hci_error_reset (David Marlin) [RHEL-33913 RHEL-31828] {CVE-2024-26801}
  - net: hns3: do not allow call hns3_nic_net_open repeatedly (Jose Ignacio Tornos Martinez) [RHEL-38933 RHEL-37707] {CVE-2021-47400}
  - tmpfs: fix Documentation of noswap and huge mount options (Nico Pache) [RHEL-38252 RHEL-31975]
  - shmem: add support to ignore swap (Chris von Recklinghausen) [RHEL-38252 RHEL-31975]
  - shmem: update documentation (Chris von Recklinghausen) [RHEL-38252 RHEL-31975]
  - shmem: skip page split if we're not reclaiming (Chris von Recklinghausen) [RHEL-38252 RHEL-31975]
  - shmem: move reclaim check early on writepages() (Chris von Recklinghausen) [RHEL-38252 RHEL-31975]
  - shmem: set shmem_writepage() variables early (Chris von Recklinghausen) [RHEL-38252 RHEL-31975]
  - shmem: remove check for folio lock on writepage() (Chris von Recklinghausen) [RHEL-38252 RHEL-31975]
  - ice: Add automatic VF reset on Tx MDD events (Petr Oros) [RHEL-39083 RHEL-36317]
  - net/ipv6: SKB symmetric hash should incorporate transport ports (Ivan Vecera) [RHEL-37641 RHEL-36218]
  - ipv6: sr: fix memleak in seg6_hmac_init_algo (Hangbin Liu) [RHEL-37669 RHEL-37511]
  - ipv6: sr: fix missing sk_buff release in seg6_input_core (Hangbin Liu) [RHEL-37669 RHEL-37511]
  - ipv6: sr: fix invalid unregister error path (Hangbin Liu) [RHEL-37669 RHEL-37511]
  - ipv6: sr: fix incorrect unregister order (Hangbin Liu) [RHEL-37669 RHEL-37511]
  - ipv6: sr: add missing seg6_local_exit (Hangbin Liu) [RHEL-37669 RHEL-37511]
  - block: fix q->blkg_list corruption during disk rebind (Ming Lei) [RHEL-36687 RHEL-33577]
  - ice: fix uninitialized dplls mutex usage (Petr Oros) [RHEL-36716 RHEL-36283]
  - ice: fix pin phase adjust updates on PF reset (Petr Oros) [RHEL-36716 RHEL-36283]
  - ice: fix dpll periodic work data updates on PF reset (Petr Oros) [RHEL-36716 RHEL-36283]
  - ice: fix dpll and dpll_pin data access on PF reset (Petr Oros) [RHEL-36716 RHEL-36283]
  - ice: fix dpll input pin phase_adjust value updates (Petr Oros) [RHEL-36716 RHEL-36283]
  - ice: fix connection state of DPLL and out pin (Petr Oros) [RHEL-36716 RHEL-36283]
  - redhat: remove the merge subtrees script (Derek Barbosa)
  - redhat: rhdocs: delete .get_maintainer.conf (Derek Barbosa)
  - redhat: rhdocs: Remove the rhdocs directory (Derek Barbosa)
  - net/mlx5: Properly link new fs rules into the tree (Kamal Heib) [RHEL-38954 RHEL-37422] {CVE-2024-35960}
  - smb: client: fix UAF in smb2_reconnect_server() (Jay Shin) [RHEL-28943 RHEL-40177 RHEL-37273 RHEL-7986] {CVE-2024-35870}
  - smb: client: remove extra @chan_count check in __cifs_put_smb_ses() (Jay Shin) [RHEL-28943 RHEL-31245]
  - RHEL: enable CONFIG_AMD_ATL (Aristeu Rozanski) [RHEL-36220 RHEL-26704]
  - EDAC/amd64: Use new AMD Address Translation Library (Aristeu Rozanski) [RHEL-36220 RHEL-26704]
  - RAS: Introduce AMD Address Translation Library (Aristeu Rozanski) [RHEL-36220 RHEL-26704]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.24.1.el9_4]
changelog:
  - net/bnx2x: Prevent access to a freed page in page_pool (Michal Schmidt) [RHEL-43272 RHEL-23117]
  - bnx2x: new flag for track HW resource allocation (Michal Schmidt) [RHEL-43272 RHEL-23117]
  - bnx2x: fix page fault following EEH recovery (Michal Schmidt) [RHEL-43272 RHEL-23117]
  - bnx2x: fix pci device refcount leak in bnx2x_vf_is_pcie_pending() (Michal Schmidt) [RHEL-43272 RHEL-23117]
  - bnx2x: fix potential memory leak in bnx2x_tpa_stop() (Michal Schmidt) [RHEL-43272 RHEL-23117]
  - xen-netfront: Add missing skb_mark_for_recycle (Vitaly Kuznetsov) [RHEL-37626 RHEL-36573] {CVE-2024-27393}
  - tools/power/turbostat: Fix uncore frequency file string (David Arcari) [RHEL-34953 RHEL-29239]
  - tools/power turbostat: Expand probe_intel_uncore_frequency() (David Arcari) [RHEL-34953 RHEL-29239]
  - net/mlx5e: fix a potential double-free in fs_any_create_groups (Kamal Heib) [RHEL-38972 RHEL-37093] {CVE-2023-52667}
  - crypto: qat - Fix typo (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Vladis Dronov) [RHEL-38546 RHEL-35816] {CVE-2024-26974}
  - crypto: qat - specify firmware files for 402xx (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - validate slices count returned by FW (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - improve error logging to be consistent across features (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - improve error message in adf_get_arbiter_mapping() (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - implement dh fallback for primes > 4K (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - Fix spelling mistake "Invalide" -> "Invalid" (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - Avoid -Wflex-array-member-not-at-end warnings (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - implement interface for live migration (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - add interface for live migration (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - add bank save and restore flows (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - expand CSR operations for QAT GEN4 devices (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - rename get_sla_arr_of_type() (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - relocate CSR access code (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - move PFVF compat checker to a function (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - relocate and rename 4xxx PF2VM definitions (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - adf_get_etr_base() helper (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - redhat/configs: Add CONFIG_CRYPTO_DEV_QAT_420XX (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - make ring to service map common for QAT GEN4 (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - fix ring to service map for dcc in 420xx (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - fix ring to service map for dcc in 4xxx (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - fix comment structure (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - remove unnecessary description from comment (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - remove double initialization of value (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - avoid division by zero (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - removed unused macro in adf_cnv_dbgfs.c (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - remove unused macros in qat_comp_alg.c (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - uninitialized variable in adf_hb_error_inject_write() (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - Documentation: qat: fix auto_reset section (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - resolve race condition during AER recovery (Vladis Dronov) [RHEL-38546 RHEL-35816] {CVE-2024-26974}
  - crypto: qat - change SLAs cleanup flow at shutdown (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - improve aer error reset handling (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - limit heartbeat notifications (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - add auto reset on error (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - add fatal error notification (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - re-enable sriov after pf reset (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - update PFVF protocol for recovery (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - disable arbitration before reset (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - add fatal error notify method (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - add heartbeat error simulator (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - use kcalloc_node() instead of kzalloc_node() (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - avoid memcpy() overflow warning (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - fix arbiter mapping generation algorithm for QAT 402xx (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - generate dynamically arbiter mappings (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - add support for ring pair level telemetry (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - add support for device telemetry (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - add admin msgs for telemetry (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - include pci.h for GET_DEV() (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - add support for 420xx devices (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - move fw config related structures (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - relocate portions of qat_4xxx code (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - change signature of uof_get_num_objs() (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - relocate and rename get_service_enabled() (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - seq_file: add helper macro to define attribute for rw file (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - minmax: Introduce {min,max}_array() (Vladis Dronov) [RHEL-38546 RHEL-35816]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.25.1.el9_4]
changelog:
  - nvme: fix reconnection fail due to reserved tag allocation (Maurizio Lombardi) [RHEL-42896 RHEL-36896] {CVE-2024-27435}
  - net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg (cki-backport-bot) [RHEL-43625] {CVE-2021-47596}
  - scsi: sg: Avoid race in error handling & drop bogus warn (Ewan D. Milne) [RHEL-36106 RHEL-35659]
  - scsi: sg: Avoid sg device teardown race (Ewan D. Milne) [RHEL-36106 RHEL-35659]
  - netfilter: nf_tables: use timestamp to check for set element timeout (Florian Westphal) [RHEL-38032 RHEL-33985] {CVE-2024-27397}
  - netfilter: nft_set_rbtree: Remove unused variable nft_net (Florian Westphal) [RHEL-38032 RHEL-33985]
  - netfilter: nft_set_rbtree: prefer sync gc to async worker (Florian Westphal) [RHEL-38032 RHEL-33985]
  - netfilter: nft_set_rbtree: rename gc deactivate+erase function (Florian Westphal) [RHEL-38032 RHEL-33985]
  - netfilter: nf_tables: de-constify set commit ops function argument (Florian Westphal) [RHEL-38032 RHEL-33985]
  - octeontx2-af: avoid off-by-one read from userspace (Kamal Heib) [RHEL-40486 RHEL-39873] {CVE-2024-36957}


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.26.1.el9_4]
changelog:
  - net: ena: Fix incorrect descriptor free behavior (Kamal Heib) [RHEL-39217 RHEL-37430] {CVE-2024-35958}
  - tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). (Guillaume Nault) [RHEL-41749 RHEL-39837] {CVE-2024-36904}
  - mm/mglru: Revert "don't sync disk for each aging cycle" (Waiman Long) [RHEL-44418]
  - tipc: fix UAF in error path (Xin Long) [RHEL-34848 RHEL-34280] {CVE-2024-36886}
  - selftest/cgroup: Update test_cpuset_prs.sh to match changes (Waiman Long) [RHEL-45139]
  - cgroup/cpuset: Make cpuset.cpus.exclusive independent of cpuset.cpus (Waiman Long) [RHEL-45139]
  - cgroup/cpuset: Delay setting of CS_CPU_EXCLUSIVE until valid partition (Waiman Long) [RHEL-45139]
  - selftest/cgroup: Fix test_cpuset_prs.sh problems reported by test robot (Waiman Long) [RHEL-45139]
  - cgroup/cpuset: Fix remote root partition creation problem (Waiman Long) [RHEL-45139]
  - cgroup/cpuset: Optimize isolated partition only generate_sched_domains() calls (Waiman Long) [RHEL-45139]
  - cgroup/cpuset: Fix retval in update_cpumask() (Waiman Long) [RHEL-45139]
  - cgroup/cpuset: Fix a memory leak in update_exclusive_cpumask() (Waiman Long) [RHEL-45139]
  - ice: implement AQ download pkg retry (Petr Oros) [RHEL-38907 RHEL-17318]
  - redhat: include resolve_btfids in kernel-devel (Viktor Malik) [RHEL-43426 RHEL-40707]
  - blk-cgroup: fix list corruption from resetting io stat (cki-backport-bot) [RHEL-44977] {CVE-2024-38663}
  - misc: rtsx: do clear express reg every SD_INT (David Arcari) [RHEL-39985 RHEL-33706]
  - misc: rtsx: Fix rts5264 driver status incorrect when card removed (David Arcari) [RHEL-39985 RHEL-33706]
  - netfilter: tproxy: bail out if IP has been disabled on the device (cki-backport-bot) [RHEL-44371] {CVE-2024-36270}
  - lib/test_hmm.c: handle src_pfns and dst_pfns allocation failure (cki-backport-bot) [RHEL-44263 RHEL-44261] {CVE-2024-38543}
  - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44039] {CVE-2024-38586}
  - net: micrel: Fix receiving the timestamp in the frame for lan8841 (cki-backport-bot) [RHEL-43996] {CVE-2024-38593}
  - vt: fix memory overlapping when deleting chars in the buffer (Waiman Long) [RHEL-43379 RHEL-27780] {CVE-2022-48627}
  - net/mlx5e: Use a memory barrier to enforce PTP WQ xmit submission tracking occurs after populating the metadata_map (Kamal Heib) [RHEL-42728 RHEL-34192] {CVE-2024-26858}
  - locking/atomic: Make test_and_*_bit() ordered on failure (Paolo Bonzini) [RHEL-45896]
  - mm/vmscan: fix a bug calling wakeup_kswapd() with a wrong zone index (Rafael Aquini) [RHEL-42659 RHEL-31840] {CVE-2024-26783}
  - can: j1939: prevent deadlock by changing j1939_socks_lock to rwlock (Jose Ignacio Tornos Martinez) [RHEL-42379 RHEL-31530] {CVE-2023-52638}
  - ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port() (Ken Cox) [RHEL-42226 RHEL-38715] {CVE-2021-47548}


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.27.1.el9_4]
changelog:
  - drm/ast: Fix soft lockup (CKI Backport Bot) [RHEL-45716]
  - dm: call the resume method on internal suspend (Benjamin Marzinski) [RHEL-41838 RHEL-33217] {CVE-2024-26880}
  - KVM: arm64: Do not re-initialize the KVM lock (Sebastian Ott) [RHEL-37528 RHEL-36279]
  - KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() (Sebastian Ott) [RHEL-37528 RHEL-36279]
  - KVM: arm64: Fix host-programmed guest events in nVHE (Sebastian Ott) [RHEL-37528 RHEL-36279]
  - KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler (Sebastian Ott) [RHEL-37528 RHEL-36279]
  - KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table() (Sebastian Ott) [RHEL-37528 RHEL-36279]
  - KVM: arm64: Fix double-free following kvm_pgtable_stage2_free_unlinked() (Sebastian Ott) [RHEL-37528 RHEL-36279]
  - octeontx2-af: Use separate handlers for interrupts (Kamal Heib) [RHEL-42846 RHEL-35170] {CVE-2024-27030}
  - Squashfs: check the inode number is not the invalid value of zero (Abhi Das) [RHEL-42811 RHEL-35098] {CVE-2024-26982}
  - net: fix sk_memory_allocated_{add|sub} vs softirqs (Paolo Abeni) [RHEL-36773 RHEL-34070]
  - tcp: sk_forced_mem_schedule() optimization (Paolo Abeni) [RHEL-36773 RHEL-34070]
  - net: make SK_MEMORY_PCPU_RESERV tunable (Paolo Abeni) [RHEL-36773 RHEL-34070]
  - ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() (Pavel Reichl) [RHEL-42655 RHEL-31690] {CVE-2024-26773}
  - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (John Meneghini) [RHEL-42528 RHEL-38200] {CVE-2023-52809}
  - KVM: x86/mmu: Retry fault before acquiring mmu_lock if mapping is changing (Maxim Levitsky) [RHEL-43388]
  - s390/cpum_cf: make crypto counters upward compatible across machine types (Tobias Huschle) [RHEL-40398 RHEL-36047]
  - RAS: enable CONFIG_RAS_FMPM (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - RAS: Avoid build errors when CONFIG_DEBUG_FS=n (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - RAS/AMD/FMPM: Safely handle saved records of various sizes (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - RAS/AMD/FMPM: Avoid NULL ptr deref in get_saved_records() (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - Merge tag 'edac_updates_for_v6.9' of git://git.kernel.org/pub/scm/linux/kernel/git/ras/ras (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - RAS/AMD/FMPM: Fix off by one when unwinding on error (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - RAS/AMD/FMPM: Add debugfs interface to print record entries (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - RAS/AMD/FMPM: Save SPA values (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - RAS: Export helper to get ras_debugfs_dir (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - RAS/AMD/ATL: Fix bit overflow in denorm_addr_df4_np2() (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - RAS: Introduce a FRU memory poison manager (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - x86/cpu/amd: Provide a separate accessor for Node ID (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - RAS/AMD/ATL: Add MI300 row retirement support (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - Documentation: Move RAS section to admin-guide (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - RAS/AMD/ATL: Add MI300 DRAM to normalized address translation support (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - RAS/AMD/ATL: Fix array overflow in get_logical_coh_st_fabric_id_mi300() (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - RAS/AMD/ATL: Add MI300 support (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - Documentation: RAS: Add index and address translation section (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - cpu/SMT: Make SMT control more robust against enumeration failures (Aristeu Rozanski) [RHEL-36212 RHEL-17008]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.28.1.el9_4]
changelog:
  - mlxbf_gige: call request_irq() after NAPI initialized (Kamal Heib) [RHEL-43012 RHEL-37179] {CVE-2024-35907}
  - mlxbf_gige: stop PHY during open() error paths (Kamal Heib) [RHEL-43012 RHEL-37179] {CVE-2024-35907}
  - mlxbf_gige: stop interface during shutdown (Kamal Heib) [RHEL-41708 RHEL-37244] {CVE-2024-35885}
  - net: amd-xgbe: Fix skb data length underflow (Ken Cox) [RHEL-43796 RHEL-43794] {CVE-2022-48743}
  - nfp: flower: handle acti_netdevs allocation failure (Ken Cox) [RHEL-42852 RHEL-35158] {CVE-2024-27046}
  - block: add check that partition length needs to be aligned with block size (Ming Lei) [RHEL-45501 RHEL-26616] {CVE-2023-52458}
  - nfsd: hold a lighter-weight client reference over CB_RECALL_ANY (Benjamin Coddington) [RHEL-45517 RHEL-31513]
  - NFSD: CREATE_SESSION must never cache NFS4ERR_DELAY replies (Benjamin Coddington) [RHEL-45517 RHEL-31513]
  - NFSD: Document the phases of CREATE_SESSION (Benjamin Coddington) [RHEL-45517 RHEL-31513]
  - NFSD: Fix the NFSv4.1 CREATE_SESSION operation (Benjamin Coddington) [RHEL-45517 RHEL-31513]
  - icmp: prevent possible NULL dereferences from icmp_build_probe() (Antoine Tenart) [RHEL-42974 RHEL-37002] {CVE-2024-35857}
  - NFSv4.1: fix handling NFS4ERR_DELAY when testing for session trunking (Scott Mayhew) [RHEL-45360 RHEL-24133]
  - RAS/AMD/ATL: Use system settings for MI300 DRAM to normalized address translation (Aristeu Rozanski) [RHEL-46335 RHEL-38634]
  - RAS/AMD/ATL: Fix MI300 bank hash (Aristeu Rozanski) [RHEL-46335 RHEL-38634]
  - net/ipv6: avoid possible UAF in ip6_route_mpath_notify() (Hangbin Liu) [RHEL-42689 RHEL-33271] {CVE-2024-26852}
  - epoll: be better about file lifetimes (Pavel Reichl) [RHEL-44091 RHEL-44083] {CVE-2024-38580}
  - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (Dick Kennedy) [RHEL-40659 RHEL-40665 RHEL-24508 RHEL-39793] {CVE-2024-36924}
  - scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (Dick Kennedy) [RHEL-40659 RHEL-40669 RHEL-24508 RHEL-39887] {CVE-2024-36952}
  - bpf: Fix racing between bpf_timer_cancel_and_free and bpf_timer_cancel (Viktor Malik) [RHEL-42640 RHEL-31726] {CVE-2024-26737}
  - can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv (Ken Cox) [RHEL-41489 RHEL-38415] {CVE-2021-47459}
  - wifi: ath11k: restore country code during resume (Jose Ignacio Tornos Martinez) [RHEL-46230 RHEL-12349]
  - wifi: ath11k: refactor setting country code logic (Jose Ignacio Tornos Martinez) [RHEL-46230 RHEL-12349]
  - bus: mhi: host: Add mhi_power_down_keep_dev() API to support system suspend/hibernation (Jose Ignacio Tornos Martinez) [RHEL-46230 RHEL-12349]
  - net: qrtr: support suspend/hibernation (Jose Ignacio Tornos Martinez) [RHEL-46230 RHEL-12349]
  - wifi: ath11k: support hibernation (Jose Ignacio Tornos Martinez) [RHEL-46230 RHEL-12349]
  - wifi: ath11k: thermal: don't try to register multiple times (Jose Ignacio Tornos Martinez) [RHEL-46230 RHEL-12349]
  - wifi: ath11k: fix warning on DMA ring capabilities event (Jose Ignacio Tornos Martinez) [RHEL-46230 RHEL-12349]
  - wifi: ath11k: do not dump SRNG statistics during resume (Jose Ignacio Tornos Martinez) [RHEL-46230 RHEL-12349]
  - wifi: ath11k: remove MHI LOOPBACK channels (Jose Ignacio Tornos Martinez) [RHEL-46230 RHEL-12349]
  - wifi: ath11k: rearrange IRQ enable/disable in reset path (Jose Ignacio Tornos Martinez) [RHEL-46230 RHEL-12349]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.29.1.el9_4]
changelog:
  - net: Avoid address overwrite in kernel_connect (Davide Caratti) [RHEL-45728 RHEL-30875]
  - net: replace calls to sock->ops->connect() with kernel_connect() (Davide Caratti) [RHEL-45728 RHEL-33410]
  - i40e: fix vf may be used uninitialized in this function warning (Kamal Heib) [RHEL-41638 RHEL-39704] {CVE-2024-36020}
  - cifs: translate network errors on send to -ECONNABORTED (Jay Shin) [RHEL-47047 RHEL-31245]
  - wifi: brcmfmac: pcie: handle randbuf allocation failure (Jose Ignacio Tornos Martinez) [RHEL-44132] {CVE-2024-38575}
  - wifi: iwlwifi: mvm: guard against invalid STA ID on removal (Jose Ignacio Tornos Martinez) [RHEL-43208 RHEL-39803] {CVE-2024-36921}
  - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Jose Ignacio Tornos Martinez) [RHEL-42906 RHEL-36809] {CVE-2024-35789}
  - wifi: iwlwifi: mvm: don't set the MFP flag for the GTK (Jose Ignacio Tornos Martinez) [RHEL-42886 RHEL-36900] {CVE-2024-27434}
  - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work (Jose Ignacio Tornos Martinez) [RHEL-42860 RHEL-35142] {CVE-2024-27052}
  - wifi: mt76: mt7925e: fix use-after-free in free_irq() (Jose Ignacio Tornos Martinez) [RHEL-42856 RHEL-35148] {CVE-2024-27049}
  - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete (Jose Ignacio Tornos Martinez) [RHEL-42743 RHEL-34187] {CVE-2024-26897}
  - wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() (Jose Ignacio Tornos Martinez) [RHEL-42383 RHEL-35199] {CVE-2023-52651}
  - net: core: reject skb_copy(_expand) for fraglist GSO skbs (Xin Long) [RHEL-41402 RHEL-39781] {CVE-2024-36929}


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.30.1.el9_4]
changelog:
  - dmaengine: idxd: add a write() method for applications to submit work (Jerry Snitselaar) [RHEL-35840] {CVE-2024-21823}
  - dmaengine: idxd: add a new security check to deal with a hardware erratum (Jerry Snitselaar) [RHEL-35840] {CVE-2024-21823}
  - VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist (Jerry Snitselaar) [RHEL-35840] {CVE-2024-21823}
  - tpm_tis_spi: Account for SPI header when allocating TPM SPI xfer buffer (Mark Salter) [RHEL-49538 RHEL-39308]
  - virtio: delete vq in vp_find_vqs_msix() when request_irq() fails (Jon Maloy) [RHEL-44467] {CVE-2024-37353}
  - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Izabela Bakollari) [RHEL-36271 RHEL-26682] {CVE-2024-26600}
  - eeprom: at24: fix memory corruption race condition (CKI Backport Bot) [RHEL-42970] {CVE-2024-35848}
  - eeprom: at24: Probe for DDR3 thermal sensor in the SPD case (CKI Backport Bot) [RHEL-42970] {CVE-2024-35848}
  - eeprom: at24: Use dev_err_probe for nvmem register failure (CKI Backport Bot) [RHEL-42970] {CVE-2024-35848}
  - eeprom: at24: Add support for 24c1025 EEPROM (CKI Backport Bot) [RHEL-42970] {CVE-2024-35848}
  - eeprom: at24: remove struct at24_client (CKI Backport Bot) [RHEL-42970] {CVE-2024-35848}
  - at24: Support probing while in non-zero ACPI D state (CKI Backport Bot) [RHEL-42970] {CVE-2024-35848}
  - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (CKI Backport Bot) [RHEL-44439] {CVE-2024-37356}
  - cxl/region: Fix cxlr_pmem leaks (cki-backport-bot) [RHEL-44486] {CVE-2024-38391}
  - tls: fix missing memory barrier in tls_init (cki-backport-bot) [RHEL-44480] {CVE-2024-36489}
  - igc: avoid returning frame twice in XDP_REDIRECT (Corinna Vinschen) [RHEL-42714 RHEL-33266] {CVE-2024-26853}
  - ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound (Hangbin Liu) [RHEL-44404 RHEL-44402] {CVE-2024-33621}
  - ipvlan: add ipvlan_route_v6_outbound() helper (Davide Caratti) [RHEL-44404 RHEL-32205]
  - ipvlan: properly track tx_errors (Davide Caratti) [RHEL-44404 RHEL-32205]
  - wifi: nl80211: don't free NULL coalescing rule (Jose Ignacio Tornos Martinez) [RHEL-41698 RHEL-39754] {CVE-2024-36941}
  - wifi: iwlwifi: dbg-tlv: ensure NUL termination (Jose Ignacio Tornos Martinez) [RHEL-41658 RHEL-37028] {CVE-2024-35845}
  - mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work (Ivan Vecera) [RHEL-41556 RHEL-37018] {CVE-2024-35852}
  - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44215] {CVE-2024-38558}
  - wifi: iwlwifi: read txq->read_ptr under lock (Jose Ignacio Tornos Martinez) [RHEL-41520 RHEL-39799] {CVE-2024-36922}
  - wifi: cfg80211: check A-MSDU format more carefully (Jose Ignacio Tornos Martinez) [RHEL-38754 RHEL-37345] {CVE-2024-35937}
  - ice: fix memory corruption bug with suspend and rebuild (Petr Oros) [RHEL-49858 RHEL-17486] {CVE-2024-35911}
  - ipv6: prevent possible NULL deref in fib6_nh_init() (Hangbin Liu) [RHEL-48182 RHEL-45826] {CVE-2024-40961}
  - netns: Make get_net_ns() handle zero refcount net (Paolo Abeni) [RHEL-48117 RHEL-46610] {CVE-2024-40958}
  - net: do not leave a dangling sk pointer, when socket creation fails (Paolo Abeni) [RHEL-48072 RHEL-46610] {CVE-2024-40954}
  - net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool() (CKI Backport Bot) [RHEL-47902] {CVE-2024-40928}
  - net: netlink: af_netlink: Prevent empty skb by adding a check on len. (Ivan Vecera) [RHEL-43619 RHEL-30344] {CVE-2021-47606}
  - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (CKI Backport Bot) [RHEL-46921] {CVE-2024-39487}
  - nfs: fix panic when nfs4_ff_layout_prepare_ds() fails (Benjamin Coddington) [RHEL-42732 RHEL-34875] {CVE-2024-26868}
  - efi: fix panic in kdump kernel (Steve Best) [RHEL-42920 RHEL-36998] {CVE-2024-35800}
  - ipv6: fix potential "struct net" leak in inet6_rtm_getaddr() (Hangbin Liu) [RHEL-41735 RHEL-31050] {CVE-2024-27417}
  - netfilter: nf_tables: do not compare internal table flags on updates (Florian Westphal) [RHEL-41682 RHEL-33985] {CVE-2024-27065}
  - ipv6: Fix potential uninit-value access in __ip6_make_skb() (Antoine Tenart) [RHEL-41466 RHEL-39786] {CVE-2024-36903}
  - netfilter: nf_tables: honor table dormant flag from netdev release event path (Florian Westphal) [RHEL-40056 RHEL-33985] {CVE-2024-36005}
  - cifs: fix underflow in parse_server_interfaces() (Paulo Alcantara) [RHEL-34636 RHEL-31245] {CVE-2024-26828}
  - drm/i915/audio: Fix audio time stamp programming for DP (CKI Backport Bot) [RHEL-45843]
  - platform/x86: wmi: Fix opening of char device (David Arcari) [RHEL-42548 RHEL-38260] {CVE-2023-52864}
  - platform/x86: wmi: remove unnecessary initializations (David Arcari) [RHEL-42548 RHEL-38260] {CVE-2023-52864}
  - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (CKI Backport Bot) [RHEL-43170] {CVE-2024-36017}
  - netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain (Florian Westphal) [RHEL-40062 RHEL-33985] {CVE-2024-26808}
  - ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr (Jiri Benc) [RHEL-39017 RHEL-32372] {CVE-2024-35969}
  - netfilter: nf_tables: flush pending destroy work before exit_net release (Florian Westphal) [RHEL-38765 RHEL-33985] {CVE-2024-35899}
  - vt: fix unicode buffer corruption when deleting characters (Andrew Halaney) [RHEL-42947 RHEL-24205] {CVE-2024-35823}


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.31.1.el9_4]
changelog:
  - net: fix __dst_negative_advice() race (CKI Backport Bot) [RHEL-46798] {CVE-2024-36971}
  - net: annotate data-races around sk->sk_dst_pending_confirm (CKI Backport Bot) [RHEL-46798] {CVE-2024-36971}


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.32.1.el9_4]
changelog:
  - REDHAT: Makefile, dont reset dist-git-tmp if set (Lucas Zampieri)
  - net/mlx5e: Fix netif state handling (Benjamin Poirier) [RHEL-43872 RHEL-43870] {CVE-2024-38608}
  - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Benjamin Poirier) [RHEL-43872 RHEL-43870] {CVE-2024-38608}
  - tun: add missing verification for short frame (Patrick Talbert) [RHEL-50202 RHEL-50203] {CVE-2024-41091}
  - tap: add missing verification for short frame (Patrick Talbert) [RHEL-50264 RHEL-50265] {CVE-2024-41090}
  - vfio/pci: Lock external INTx masking ops (Alex Williamson) [RHEL-43421 RHEL-30023] {CVE-2024-26810}
  - net: bridge: xmit: make sure we have at least eth header len bytes (cki-backport-bot) [RHEL-44299] {CVE-2024-38538}
  - KVM: arm64: Ensure target address is granule-aligned for range TLBI (Sebastian Ott) [RHEL-52248 RHEL-31215]
  - RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt (cki-backport-bot) [RHEL-44250] {CVE-2024-38544}
  - NFSv4: Fix memory leak in nfs4_set_security_label (CKI Backport Bot) [RHEL-52082] {CVE-2024-41076}
  - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Nigel Croxon) [RHEL-46421 RHEL-35393] {CVE-2024-39476}
  - KVM: s390: fix LPSWEY handling (CKI Backport Bot) [RHEL-50074]
  - cxl/port: Fix delete_endpoint() vs parent unregistration race (John W. Linville) [RHEL-39290 RHEL-23582] {CVE-2023-52771}
  - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (Petr Oros) [RHEL-49862 RHEL-17486] {CVE-2024-26855}
  - ice: fix LAG and VF lock dependency in ice_reset_vf() (Petr Oros) [RHEL-49820 RHEL-17486] {CVE-2024-36003}
  - net: wwan: iosm: Fix tainted pointer delete is case of region creation fail (Jose Ignacio Tornos Martinez) [RHEL-47992 RHEL-9429] {CVE-2024-40939}
  - wifi: cfg80211: Lock wiphy in cfg80211_get_station (CKI Backport Bot) [RHEL-47770] {CVE-2024-40911}
  - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (CKI Backport Bot) [RHEL-47788] {CVE-2024-40912}
  - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (CKI Backport Bot) [RHEL-47920] {CVE-2024-40929}
  - wifi: iwlwifi: mvm: don't read past the mfuart notifcation (CKI Backport Bot) [RHEL-48028] {CVE-2024-40941}
  - seg6: fix parameter passing when calling NF_HOOK() in End.DX4 and End.DX6 behaviors (Hangbin Liu) [RHEL-48098 RHEL-45826] {CVE-2024-40957}
  - ipv6: fix possible race in __fib6_drop_pcpu_from() (Hangbin Liu) [RHEL-47572 RHEL-45826] {CVE-2024-40905}
  - redhat/configs: Enable CONFIG_DRM_MGAG200_DISABLE_WRITECOMBINE (Jocelyn Falempe) [RHEL-39581 RHEL-28760]
  - drm/mgag200: Add an option to disable Write-Combine (Jocelyn Falempe) [RHEL-39581 RHEL-28760]
  - drm/mgag200: Fix caching setup for remapped video memory (Scott Weaver) [RHEL-39581 RHEL-24102]
  - Revert "drm/mgag200: Flush the cache to improve latency" (Scott Weaver) [RHEL-39581 RHEL-28760]
  - net: psample: fix flag being set in wrong skb (Adrian Moreno) [RHEL-47275]
  - net: openvswitch: store sampling probability in cb. (Adrian Moreno) [RHEL-47275]
  - net: openvswitch: add psample action (Adrian Moreno) [RHEL-47275]
  - net: psample: allow using rate as probability (Adrian Moreno) [RHEL-47275]
  - net: psample: skip packet copy if no listeners (Adrian Moreno) [RHEL-47275]
  - net: psample: add user cookie (Adrian Moreno) [RHEL-47275]
  - i40e: fix: remove needless retries of NVM update (CKI Backport Bot) [RHEL-48169 RHEL-36692]
  - ice: Reject pin requests with unsupported flags (Petr Oros) [RHEL-50388 RHEL-17486]
  - ice: Don't process extts if PTP is disabled (Petr Oros) [RHEL-50388 RHEL-17486]
  - ice: Fix improper extts handling (Petr Oros) [RHEL-50388 RHEL-17486]
  - ice: stop destroying and reinitalizing Tx tracker during reset (Petr Oros) [RHEL-50388 RHEL-17486]
  - ice: factor out ice_ptp_rebuild_owner() (Petr Oros) [RHEL-50388 RHEL-17486]
  - ice: rename ice_ptp_tx_cfg_intr (Petr Oros) [RHEL-50388 RHEL-17486]
  - ice: don't check has_ready_bitmap in E810 functions (Petr Oros) [RHEL-50388 RHEL-17486]
  - ice: rename verify_cached to has_ready_bitmap (Petr Oros) [RHEL-50388 RHEL-17486]
  - ice: pass reset type to PTP reset functions (Petr Oros) [RHEL-50388 RHEL-17486]
  - ice: introduce PTP state machine (Petr Oros) [RHEL-50388 RHEL-17486]
  - ice: make RX HW timestamp reading code more reusable (Petr Oros) [RHEL-50388 RHEL-17486]
  - ice: Rename E822 to E82X (Petr Oros) [RHEL-50388 RHEL-17486]
  - ice: periodically kick Tx timestamp interrupt (Petr Oros) [RHEL-50388 RHEL-17486]
  - ice: Re-enable timestamping correctly after reset (Petr Oros) [RHEL-50388 RHEL-17486]
  - ptp: introduce helpers to adjust by scaled parts per million (Petr Oros) [RHEL-50388 RHEL-17486]
  - tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc (Andrew Halaney) [RHEL-42566 RHEL-24205] {CVE-2023-52880}
  - netfilter: complete validation of user input (Phil Sutter) [RHEL-47384 RHEL-37212] {CVE-2024-35962}
  - netfilter: validate user input for expected length (Phil Sutter) [RHEL-41668 RHEL-37212] {CVE-2024-35896}
  - scsi: qla2xxx: Fix off by one in qla_edif_app_getstats() (Ewan D. Milne) [RHEL-40051 RHEL-39719] {CVE-2024-36025}
  - x86/xen: Add some null pointer checking to smp.c (Vitaly Kuznetsov) [RHEL-37615 RHEL-33260] {CVE-2024-26908}
  - x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() (Prarit Bhargava) [RHEL-37615 RHEL-25415]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.33.1.el9_4]
changelog:
  - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44287] {CVE-2024-38540}
  - netfilter: flowtable: validate pppoe header (Florian Westphal) [RHEL-44430 RHEL-33469] {CVE-2024-27016}
  - crypto: bcm - Fix pointer arithmetic (cki-backport-bot) [RHEL-44116] {CVE-2024-38579}
  - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). (CKI Backport Bot) [RHEL-51035 RHEL-51033] {CVE-2024-41041}
  - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (Florian Westphal) [RHEL-42832 RHEL-33985] {CVE-2024-27019}
  - netfilter: nf_tables: restrict tunnel object to NFPROTO_NETDEV (Florian Westphal) [RHEL-42832 RHEL-33985]
  - netfilter: nf_tables: NULL pointer dereference in nf_tables_updobj() (Florian Westphal) [RHEL-42832 RHEL-33985]
  - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (Florian Westphal) [RHEL-41802 RHEL-33985] {CVE-2024-26925}
  - netfilter: nf_tables: discard table flag update with pending basechain deletion (Florian Westphal) [RHEL-40231 RHEL-33985] {CVE-2024-35897}
  - netfilter: nf_tables: reject table flag and netdev basechain updates (Florian Westphal) [RHEL-40231 RHEL-33985]
  - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-42966 RHEL-37040] {CVE-2024-35839}
  - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-42966 RHEL-37040] {CVE-2024-35839}
  - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-42966 RHEL-37040] {CVE-2024-35839}
  - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-42966 RHEL-37040] {CVE-2024-35839}
  - netfilter: nft_limit: reject configurations that cause integer overflow (Florian Westphal) [RHEL-40065 RHEL-33985] {CVE-2024-26668}
  - scsi: qedi: Fix crash while reading debugfs attribute (CKI Backport Bot) [RHEL-48339] {CVE-2024-40978}
  - mm/huge_memory: don't unpoison huge_zero_folio (Aristeu Rozanski) [RHEL-47804] {CVE-2024-40914}
  - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48375 RHEL-6118] {CVE-2024-40983}
  - netfilter: nft_set_rbtree: skip end interval element from gc (Florian Westphal) [RHEL-41265] {CVE-2024-26581}
  - nvmet: fix a possible leak when destroy a ctrl during qp establishment (CKI Backport Bot) [RHEL-52021 RHEL-52019 RHEL-52020] {CVE-2024-42152}
  - net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx() (CKI Backport Bot) [RHEL-51756] {CVE-2024-42110}
  - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Florian Westphal) [RHEL-40265 RHEL-33985] {CVE-2024-35898}
  - netfilter: br_netfilter: remove WARN traps (CKI Backport Bot) [RHEL-42882] {CVE-2024-27415}
  - netfilter: br_netfilter: skip conntrack input hook for promisc packets (CKI Backport Bot) [RHEL-42882] {CVE-2024-27415}
  - netfilter: bridge: confirm multicast packets before passing them up the stack (CKI Backport Bot) [RHEL-42882] {CVE-2024-27415}
  - netfilter: nf_conntrack_bridge: initialize err to 0 (CKI Backport Bot) [RHEL-42882] {CVE-2024-27415}
  - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Florian Westphal) [RHEL-42842 RHEL-33985] {CVE-2024-27020}


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.34.1.el9_4]
changelog:
  - mm: prevent derefencing NULL ptr in pfn_section_valid() (Jarod Wilson) [RHEL-51140 RHEL-51138] {CVE-2024-41055}
  - mm, kmsan: fix infinite recursion due to RCU critical section (Jarod Wilson) [RHEL-51140 RHEL-51138] {CVE-2024-41055}
  - ppp: reject claimed-as-LCP but actually malformed packets (CKI Backport Bot) [RHEL-51061 RHEL-51059] {CVE-2024-41044}
  - x86: stop playing stack games in profile_pc() (CKI Backport Bot) [RHEL-51651] {CVE-2024-42096}
  - PCI/MSI: Fix UAF in msi_capability_init (CKI Backport Bot) [RHEL-51438] {CVE-2024-41096}
  - iommufd: Fix missing update of domains_itree after splitting iopt_area (Jerry Snitselaar) [RHEL-42518 RHEL-28780] {CVE-2023-52801}
  - mm: cachestat: fix folio read-after-free in cache walk (Nico Pache) [RHEL-41739 RHEL-5619] {CVE-2024-26630}
  - regmap: maple: Fix cache corruption in regcache_maple_drop() (Jaroslav Kysela) [RHEL-43179 RHEL-39706] {CVE-2024-36019}
  - mm: cachestat: fix two shmem bugs (Nico Pache) [RHEL-36912] {CVE-2024-35797}
  - kprobes/x86: Use copy_from_kernel_nofault() to read from unsafe address (Steve Best) [RHEL-42778 RHEL-34985] {CVE-2024-26946}
  - mm/hugetlb: fix missing hugetlb_lock for resv uncharge (Rafael Aquini) [RHEL-43132 RHEL-37467] {CVE-2024-36000}
  - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52675 RHEL-50366]
  - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52675 RHEL-50366]
  - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52675 RHEL-50366]
  - gpio: tegra186: Fix tegra186_gpio_is_accessible() check (Charles Mirabile) [RHEL-49347 RHEL-32452]
  - net/sched: Fix UAF when resolving a clash (CKI Backport Bot) [RHEL-51022 RHEL-51020] {CVE-2024-41040}
  - KVM: SVM: Flush pages under kvm->lock to fix UAF in svm_register_enc_region() (Maxim Levitsky) [RHEL-41462 RHEL-32430] {CVE-2024-35791}
  - cxl/region: Fix memregion leaks in devm_cxl_add_region() (John W. Linville) [RHEL-47965 RHEL-23582] {CVE-2024-40936}
  - x86/coco: Require seeding RNG with RDRAND on CoCo systems (Lenny Szubowicz) [RHEL-42986 RHEL-37269] {CVE-2024-35875}
  - scsi: qedf: Ensure the copied buf is NUL terminated (cki-backport-bot) [RHEL-44203] {CVE-2024-38559}


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.35.1.el9_4]
changelog:
  - usb-storage: alauda: Check whether the media is initialized (CKI Backport Bot) [RHEL-43716] {CVE-2024-38619}
  - ceph: force sending a cap update msg back to MDS for revoke op (Xiubo Li) [RHEL-55437]
  - ceph: periodically flush the cap releases (Xiubo Li) [RHEL-55437]
  - mm: avoid overflows in dirty throttling logic (Jay Shin) [RHEL-51848 RHEL-50004] {CVE-2024-42131}
  - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (Jay Shin) [RHEL-51701 RHEL-50004] {CVE-2024-42102}
  - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Jay Shin) [RHEL-42628 RHEL-5619] {CVE-2024-26720}
  - net: fix out-of-bounds access in ops_init (Paolo Abeni) [RHEL-43188 RHEL-46610] {CVE-2024-36883}
  - nvme: avoid double free special payload (CKI Backport Bot) [RHEL-51311] {CVE-2024-41073}
  - kernfs: change kernfs_rename_lock into a read-write lock (Jay Shin) [RHEL-55253 RHEL-52956]
  - kernfs: Separate kernfs_pr_cont_buf and rename_lock (Jay Shin) [RHEL-55253 RHEL-52956]
  - kernfs: fix missing kernfs_iattr_rwsem locking (Jay Shin) [RHEL-55253 RHEL-52956]
  - kernfs: Use a per-fs rwsem to protect per-fs list of kernfs_super_info (Jay Shin) [RHEL-55253 RHEL-52956]
  - kernfs: Introduce separate rwsem to protect inode attributes (Jay Shin) [RHEL-55253 RHEL-52956]
  - xhci: Handle TD clearing for multiple streams case (CKI Backport Bot) [RHEL-47894 RHEL-47892] {CVE-2024-40927}
  - Bluetooth: af_bluetooth: Fix deadlock (Bastien Nocera) [RHEL-34161] {CVE-2024-26886}
  - xdp: Remove WARN() from __xdp_reg_mem_model() (CKI Backport Bot) [RHEL-51586] {CVE-2024-42082}
  - nfsd: don't take fi_lock in nfsd_break_deleg_cb() (Benjamin Coddington) [RHEL-42578 RHEL-34875]
  - nfsd: fix RELEASE_LOCKOWNER (Benjamin Coddington) [RHEL-42578 RHEL-34875] {CVE-2024-26629}
  - net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (CKI Backport Bot) [RHEL-43729 RHEL-43727]
  - net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (CKI Backport Bot) [RHEL-43729 RHEL-43727]
  - net: bridge: mst: fix vlan use-after-free (cki-backport-bot) [RHEL-43729] {CVE-2024-36979}
  - efivarfs: force RO when remounting if SetVariable is not supported (Pavel Reichl) [RHEL-42343 RHEL-26588] {CVE-2023-52463}
  - ACPI: arm64: export acpi_arch_thermal_cpufreq_pctg() (Charles Mirabile) [RHEL-34234 RHEL-1697]
  - ACPI: processor: reduce CPUFREQ thermal reduction pctg for Tegra241 (Charles Mirabile) [RHEL-34234 RHEL-1697]
  - ACPI: thermal: Add Thermal fast Sampling Period (_TFP) support (Scott Weaver) [RHEL-34234 RHEL-1697]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.36.1.el9_4]
changelog:
  - scsi: qla2xxx: Fix double free of fcport (Nilesh Javali) [RHEL-39547 RHEL-40034 RHEL-25184 RHEL-35020] {CVE-2024-26929}
  - scsi: qla2xxx: Fix double free of the ha->vp_map pointer (Nilesh Javali) [RHEL-39547 RHEL-41325 RHEL-25184 RHEL-35016] {CVE-2024-26930}
  - scsi: qla2xxx: Fix command flush on cable pull (Nilesh Javali) [RHEL-39547 RHEL-40029 RHEL-25184 RHEL-35012] {CVE-2024-26931}
  - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (Benjamin Coddington) [RHEL-53708 RHEL-53004] {CVE-2024-42246}
  - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-56275 RHEL-56084]
  - wifi: mt76: replace skb_put with skb_put_zero (CKI Backport Bot) [RHEL-52368] {CVE-2024-42225}
  - cppc_cpufreq: Fix possible null pointer dereference (cki-backport-bot) [RHEL-44145] {CVE-2024-38573}
  - ring-buffer: Fix a race between readers and resize checks (cki-backport-bot) [RHEL-43920] {CVE-2024-38601}
  - fork: defer linking file vma until vma is fully initialized (Rafael Aquini) [RHEL-35617 RHEL-35022] {CVE-2024-27022}
  - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48393 RHEL-48391] {CVE-2024-40984}
  - KVM: x86/mmu: x86: Don't overflow lpage_info when checking attributes (Maxim Levitsky) [RHEL-41345 RHEL-32430] {CVE-2024-26991}
  - net/sched: act_mirred: don't override retval if we already lost the skb (Davide Caratti) [RHEL-42644 RHEL-31724] {CVE-2024-26739}
  - net/sched: act_mirred: Create function tcf_mirred_to_dev and improve readability (Davide Caratti) [RHEL-42644 RHEL-32137]
  - cpufreq: exit() callback is optional (cki-backport-bot) [RHEL-43848] {CVE-2024-38615}
  - gfs2: Fix potential glock use-after-free on unmount (Andreas Gruenbacher) [RHEL-44157 RHEL-44155] {CVE-2024-38570}
  - gfs2: simplify gdlm_put_lock with out_free label (Andreas Gruenbacher) [RHEL-44157 RHEL-44155] {CVE-2024-38570}
  - gfs2: Remove ill-placed consistency check (Andreas Gruenbacher) [RHEL-44157 RHEL-44155] {CVE-2024-38570}
  - wifi: nl80211: Avoid address calculations via out of bounds array indexing (Jose Ignacio Tornos Martinez) [RHEL-46505 RHEL-34696] {CVE-2024-38562}


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.37.1.el9_4]
changelog:
  - ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses (CKI Backport Bot) [RHEL-42783] {CVE-2024-26947}
  - powerpc/pseries/iommu: IOMMU table is not initialized for kdump over SR-IOV (Mamatha Inamdar) [RHEL-45537 RHEL-25055]
  - tty: n_gsm: fix possible out-of-bounds in gsm0_receive() (Steve Best) [RHEL-40517 RHEL-39354] {CVE-2024-36016}
  - smb: client: set correct id, uid and cruid for multiuser automounts (Jay Shin) [RHEL-47260 RHEL-31245]
  - printk: printk.c: Disable per_console_kthreads on !CONFIG_PREEMPT_RT (Derek Barbosa) [RHEL-39064]
  - uio: Fix use-after-free in uio_open (Ricardo Robaina) [RHEL-41275 RHEL-26233] {CVE-2023-52439}
  - gpiolib: cdev: Fix use after free in lineinfo_changed_notify (Steve Best) [RHEL-43192 RHEL-39849] {CVE-2024-36899}
  - wifi: mac80211: Avoid address calculations via out of bounds array indexing (CKI Backport Bot) [RHEL-51287 RHEL-51285] {CVE-2024-41071}
  - Input: cyapa - add missing input core locking to suspend/resume functions (cki-backport-bot) [RHEL-44455] {CVE-2023-52884}
  - net: usb: lan78xx: reorder cleanup operations to avoid UAF bugs (Jamie Bainbridge) [RHEL-34928 RHEL-33332]
  - lan78xx: Limit number of driver warning messages (Jamie Bainbridge) [RHEL-34928 RHEL-33332]
  - lan78xx: Fix race condition in disconnect handling (Jamie Bainbridge) [RHEL-34928 RHEL-33332]
  - lan78xx: Fix race conditions in suspend/resume handling (Jamie Bainbridge) [RHEL-34928 RHEL-33332]
  - lan78xx: Fix partial packet errors on suspend/resume (Jamie Bainbridge) [RHEL-34928 RHEL-33332]
  - lan78xx: Fix exception on link speed change (Jamie Bainbridge) [RHEL-34928 RHEL-33332]
  - lan78xx: Add missing return code checks (Jamie Bainbridge) [RHEL-34928 RHEL-33332]
  - lan78xx: Remove unused pause frame queue (Jamie Bainbridge) [RHEL-34928 RHEL-33332]
  - lan78xx: Set flow control threshold to prevent packet loss (Jamie Bainbridge) [RHEL-34928 RHEL-33332]
  - lan78xx: Remove unused timer (Jamie Bainbridge) [RHEL-34928 RHEL-33332]
  - lan78xx: Fix white space and style issues (Jamie Bainbridge) [RHEL-34928 RHEL-33332]
  - sctp: fix association labeling in the duplicate COOKIE-ECHO case (CKI Backport Bot) [RHEL-56745 RHEL-48647]
  - ice: xsk: fix txq interrupt mapping (Petr Oros) [RHEL-52771 RHEL-15670]
  - ice: add missing WRITE_ONCE when clearing ice_rx_ring::xdp_prog (Petr Oros) [RHEL-52771 RHEL-15670]
  - ice: improve updating ice_{t,r}x_ring::xsk_pool (Petr Oros) [RHEL-52771 RHEL-15670]
  - ice: toggle netif_carrier when setting up XSK pool (Petr Oros) [RHEL-52771 RHEL-15670]
  - ice: modify error handling when setting XSK pool in ndo_bpf (Petr Oros) [RHEL-52771 RHEL-15670]
  - ice: replace synchronize_rcu with synchronize_net (Petr Oros) [RHEL-52771 RHEL-15670]
  - ice: don't busy wait for Rx queue disable in ice_qp_dis() (Petr Oros) [RHEL-52771 RHEL-15670]
  - ice: respect netif readiness in AF_XDP ZC related ndo's (Petr Oros) [RHEL-52771 RHEL-15670]
  - ice: remove af_xdp_zc_qps bitmap (Petr Oros) [RHEL-52771 RHEL-17486]
  - ice: reorder disabling IRQ and NAPI in ice_qp_dis (Petr Oros) [RHEL-52771 RHEL-17486]
  - ice: make ice_vsi_cfg_txq() static (Petr Oros) [RHEL-52771 RHEL-17486]
  - ice: make ice_vsi_cfg_rxq() static (Petr Oros) [RHEL-52771 RHEL-17486]
  - ice: make use of DEFINE_FLEX() for struct ice_aqc_add_tx_qgrp (Petr Oros) [RHEL-52771 RHEL-17486]
  - xdp: reflect tail increase for MEM_TYPE_XSK_BUFF_POOL (Petr Oros) [RHEL-52771 RHEL-38863]
  - ice: update xdp_rxq_info::frag_size for ZC enabled Rx queue (Petr Oros) [RHEL-52771 RHEL-38863]
  - intel: xsk: initialize skb_frag_t::bv_offset in ZC drivers (Petr Oros) [RHEL-52771 RHEL-38863]
  - ice: remove redundant xdp_rxq_info registration (Petr Oros) [RHEL-52771 RHEL-38863]
  - ice: work on pre-XDP prog frag count (Petr Oros) [RHEL-52771 RHEL-38863]
  - xsk: fix usage of multi-buffer BPF helpers for ZC XDP (Petr Oros) [RHEL-52771 RHEL-38863]
  - xsk: make xsk_buff_pool responsible for clearing xdp_buff::flags (Petr Oros) [RHEL-52771 RHEL-38863]
  - xsk: recycle buffer in case Rx queue was full (Petr Oros) [RHEL-52771 RHEL-38863]
  - overflow: add DEFINE_FLEX() for on-stack allocs (Petr Oros) [RHEL-52771 RHEL-30138]
  - overflow: Add struct_size_t() helper (Petr Oros) [RHEL-52771 RHEL-30138]
  - bpf, sockmap: Prevent lock inversion deadlock in map delete elem (Felix Maurer) [RHEL-41479 RHEL-30107] {CVE-2024-35895}
  - xfs: allow SECURE namespace xattrs to use reserved block pool (CKI Backport Bot) [RHEL-54443 RHEL-49806]
  - platform/x86/intel-uncore-freq: Don't present root domain on error (David Arcari) [RHEL-43291 RHEL-38558]
  - platform/x86/intel-uncore-freq: Increase minor number support (David Arcari) [RHEL-43291 RHEL-38558]
  - platform/x86/intel-uncore-freq: Process read/write blocked feature status (David Arcari) [RHEL-43291 RHEL-38558]
  - platform/x86/intel/tpmi: Move TPMI ID definition (Steve Best) [RHEL-43291 RHEL-35956]
  - ice: fix VSI lists confusion when adding VLANs (CKI Backport Bot) [RHEL-57778 RHEL-20571]
  - ice: fix accounting for filters shared by multiple VSIs (CKI Backport Bot) [RHEL-57778 RHEL-20571]
  - ice: fix accounting if a VLAN already exists (CKI Backport Bot) [RHEL-57778 RHEL-17486]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.38.1.el9_4]
changelog:
  - module: avoid allocation if module is already present and ready (Donald Dutile) [RHEL-52417]
  - module: move early sanity checks into a helper (Donald Dutile) [RHEL-52417]
  - module: extract patient module check into helper (Donald Dutile) [RHEL-52417]
  - null_blk: Fix return value of nullb_device_power_store() (Ming Lei) [RHEL-58636 RHEL-39662]
  - null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues' (Ming Lei) [RHEL-58636 RHEL-39662]
  - net: sched: sch_multiq: fix possible OOB write in multiq_tune() (cki-backport-bot) [RHEL-43472] {CVE-2024-36978}
  - netfilter: nft_flow_offload: release dst in case direct xmit path is used (Florian Westphal) [RHEL-38520 RHEL-33469]
  - netfilter: nft_flow_offload: reset dst in route object after setting up flow (Florian Westphal) [RHEL-38520 RHEL-33469] {CVE-2024-27403}
  - netfilter: flowtable: simplify route logic (Florian Westphal) [RHEL-38520 RHEL-33469]
  - net: psample: fix uninitialized metadata. (Adrian Moreno) [RHEL-56909]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.39.1.el9_4]
changelog:
  - mptcp: ensure snd_nxt is properly initialized on connect (cki-backport-bot) [RHEL-52474 RHEL-39867] {CVE-2024-36889}
  - ping: fix address binding wrt vrf (Antoine Tenart) [RHEL-57563 RHEL-50920]
  - net/mlx5: Add a timeout to acquire the command queue semaphore (Benjamin Poirier) [RHEL-44227 RHEL-44225] {CVE-2024-38556}
  - xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() (CKI Backport Bot) [RHEL-48142 RHEL-48140] {CVE-2024-40959}
  - ionic: fix use after netif_napi_del() (Michal Schmidt) [RHEL-47636 RHEL-47634] {CVE-2024-39502}
  - ionic: clean interrupt before enabling queue to avoid credit race (Michal Schmidt) [RHEL-47636 RHEL-36065]
  - Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (Benjamin Poirier) [RHEL-42391 RHEL-24466] {CVE-2023-52658}
  - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55075 RHEL-55074] {CVE-2024-42284}
  - x86: set FSRS automatically on AMD CPUs that have FSRM (Prarit Bhargava) [RHEL-56970 RHEL-25415]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.40.1.el9_4]
changelog:
  - gfs2: Fix NULL pointer dereference in gfs2_log_flush (CKI Backport Bot) [RHEL-51561 RHEL-51559] {CVE-2024-42079}
  - net: stmmac: Separate C22 and C45 transactions for xgmac (CKI Backport Bot) [RHEL-60274 RHEL-6297]
  - dmaengine: idxd: Check for driver name match before sva user feature (Jerry Snitselaar) [RHEL-47239 RHEL-44836 RHEL-46619]
  - ceph: switch to corrected encoding of max_xattr_size in mdsmap (Xiubo Li) [RHEL-57609 RHEL-26722]
  - KVM: SVM: WARN on vNMI + NMI window iff NMIs are outright masked (CKI Backport Bot) [RHEL-46428] {CVE-2024-39483}
  - vfs: don't mod negative dentry count when on shrinker list (Brian Foster) [RHEL-60567 RHEL-46609]
  - fs/dcache: Re-use value stored to dentry->d_flags instead of re-reading (Brian Foster) [RHEL-60567 RHEL-46609]
  - x86/bugs: Reverse instruction order of CLEAR_CPU_BUFFERS (Waiman Long) [RHEL-48713 RHEL-31226] {CVE-2023-28746}
  - Revert "x86/bugs: Use fixed addressing for VERW operand" (Waiman Long) [RHEL-48713 RHEL-31226] {CVE-2023-28746}
  - KVM/x86: Export RFDS_NO and RFDS_CLEAR to guests (Waiman Long) [RHEL-48713 RHEL-31226] {CVE-2023-28746}
  - redhat/configs: Enable x86 CONFIG_MITIGATION_RFDS (Waiman Long) [RHEL-48713 RHEL-31226] {CVE-2023-28746}
  - x86/rfds: Mitigate Register File Data Sampling (RFDS) (Waiman Long) [RHEL-48713 RHEL-31226] {CVE-2023-28746}
  - Documentation/hw-vuln: Add documentation for RFDS (Waiman Long) [RHEL-48713 RHEL-31226] {CVE-2023-28746}
  - x86/mmio: Disable KVM mitigation when X86_FEATURE_CLEAR_CPU_BUF is set (Waiman Long) [RHEL-48713 RHEL-31226] {CVE-2023-28746}
  - x86/bugs: Use fixed addressing for VERW operand (Waiman Long) [RHEL-48713 RHEL-31226] {CVE-2023-28746}
  - KVM/VMX: Move VERW closer to VMentry for MDS mitigation (Waiman Long) [RHEL-48713 RHEL-31226] {CVE-2023-28746}
  - KVM/VMX: Use BT+JNC, i.e. EFLAGS.CF to select VMRESUME vs. VMLAUNCH (Waiman Long) [RHEL-48713 RHEL-31226] {CVE-2023-28746}
  - x86/bugs: Use ALTERNATIVE() instead of mds_user_clear static key (Waiman Long) [RHEL-48713 RHEL-31226] {CVE-2023-28746}
  - x86/entry_32: Add VERW just before userspace transition (Waiman Long) [RHEL-48713 RHEL-31226] {CVE-2023-28746}
  - x86/entry_64: Add VERW just before userspace transition (Waiman Long) [RHEL-48713 RHEL-31226] {CVE-2023-28746}
  - x86/entry: Harden return-to-user (Prarit Bhargava) [RHEL-48713 RHEL-25415]
  - x86/entry: Optimize common_interrupt_return() (Prarit Bhargava) [RHEL-48713 RHEL-25415]
  - x86/bugs: Add asm helpers for executing VERW (Waiman Long) [RHEL-48713 RHEL-31226] {CVE-2023-28746}
  - sched: act_ct: take care of padding in struct zones_ht_key (Xin Long) [RHEL-55112 RHEL-50682] {CVE-2024-42272}
  - sched: act_ct: add netns into the key of tcf_ct_flow_table (Xin Long) [RHEL-55112 RHEL-28816]
  - dmaengine: idxd: Fix oops during rmmod on single-CPU platforms (CKI Backport Bot) [RHEL-41361] {CVE-2024-35989}
  - hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-42115 RHEL-37721] {CVE-2021-47385}


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.41.1.el9_4]
changelog:
  - iommu/amd: Fix panic accessing amd_iommu_enable_faulting (Jerry Snitselaar) [RHEL-55507 RHEL-37320 RHEL-40344]
  - iommu/vt-d: Allocate DMAR fault interrupts locally (Jerry Snitselaar) [RHEL-55507 RHEL-28780]
  - netfilter: nft_inner: validate mandatory meta and payload (Phil Sutter) [RHEL-47488 RHEL-47486] {CVE-2024-39504}
  - netfilter: flowtable: initialise extack before use (CKI Backport Bot) [RHEL-58546 RHEL-58544] {CVE-2024-45018}
  - ext4: do not create EA inode under buffer lock (Carlos Maiolino) [RHEL-48285 RHEL-48282] {CVE-2024-40972}
  - ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (Carlos Maiolino) [RHEL-48285 RHEL-48282] {CVE-2024-40972}
  - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (Carlos Maiolino) [RHEL-48519 RHEL-48517] {CVE-2024-40998}
  - ext4: turn quotas off if mount failed after enabling quotas (Carlos Maiolino) [RHEL-48519 RHEL-48517] {CVE-2024-40998}
  - mptcp: fix data re-injection from stale subflow (Davide Caratti) [RHEL-59920 RHEL-32669] {CVE-2024-26826}
  - xfs: add bounds checking to xlog_recover_process_data (CKI Backport Bot) [RHEL-50864 RHEL-50862] {CVE-2024-41014}
  - af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc(). (Davide Caratti) [RHEL-42771 RHEL-33410]
  - af_unix: Fix garbage collector racing against connect() (Davide Caratti) [RHEL-42771 RHEL-33410] {CVE-2024-26923}
  - af_unix: fix lockdep positive in sk_diag_dump_icons() (Davide Caratti) [RHEL-42771 RHEL-33410]
  - xfs: don't walk off the end of a directory data block (CKI Backport Bot) [RHEL-50887 RHEL-50885] {CVE-2024-41013}
  - ipv6: prevent possible NULL dereference in rt6_probe() (Hangbin Liu) [RHEL-48161 RHEL-45826] {CVE-2024-40960}
  - mac802154: fix llsec key resources release in mac802154_llsec_key_del (Steve Best) [RHEL-42795 RHEL-34969] {CVE-2024-26961}
  - mptcp: ensure snd_una is properly initialized on connect (Florian Westphal) [RHEL-47945 RHEL-47943] {CVE-2024-40931}
  - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47560 RHEL-47558] {CVE-2024-40904}
  - nvme-multipath: fix io accounting on failover (John Meneghini) [RHEL-59646 RHEL-56635]
  - nvme: fix multipath batched completion accounting (John Meneghini) [RHEL-59646 RHEL-56635]
  - xfs: fix log recovery buffer allocation for the legacy h_size fixup (Bill O'Donnell) [RHEL-46481 RHEL-46479] {CVE-2024-39472}
  - tcp: add sanity checks to rx zerocopy (Paolo Abeni) [RHEL-58403 RHEL-29496] {CVE-2024-26640}
  - netpoll: Fix race condition in netpoll_owner_active (CKI Backport Bot) [RHEL-49373 RHEL-49371] {CVE-2024-41005}
  - wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (CKI Backport Bot) [RHEL-48321 RHEL-48319] {CVE-2024-40977}
  - smb: client: fix hang in wait_for_response() for negproto (Jay Shin) [RHEL-61606 RHEL-57983]
  - NFSv4.1/pnfs: fix NFS with TLS in pnfs (Benjamin Coddington) [RHEL-61467 RHEL-34576]
  - ceph: remove the incorrect Fw reference check when dirtying pages (Xiubo Li) [RHEL-61415 RHEL-60255]
  - net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() (Davide Caratti) [RHEL-48483 RHEL-44375] {CVE-2024-40995}
  - net/sched: taprio: extend minimum interval restriction to entire cycle too (Davide Caratti) [RHEL-44377 RHEL-44375] {CVE-2024-36244}
  - net/sched: taprio: make q->picos_per_byte available to fill_sched_entry() (Davide Caratti) [RHEL-44377 RHEL-44375] {CVE-2024-36244}


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.42.1.el9_4]
changelog:
  - redhat/configs: Add CONFIG_MITIGATION_SPECTRE_BHI (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - x86/bugs: Fix BHI retpoline check (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - x86/bugs: Fix BHI handling of RRSBA (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr' (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - x86/bugs: Fix BHI documentation (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - x86/bugs: Fix return type of spectre_bhi_state() (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - x86/bugs: Make CONFIG_SPECTRE_BHI_ON the default (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - KVM: x86: Add BHI_NO (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - x86/bhi: Mitigate KVM by default (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - x86/bhi: Add BHI mitigation knob (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - x86/bhi: Enumerate Branch History Injection (BHI) bug (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - x86/bhi: Add support for clearing branch history at syscall entry (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - perf/x86/amd/lbr: Use freeze based on availability (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - Documentation/kernel-parameters: Add spec_rstack_overflow to mitigations=off (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - KVM: x86: Use a switch statement and macros in __feature_translate() (Maxim Levitsky) [RHEL-45492 RHEL-32430]
  - KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Maxim Levitsky) [RHEL-45492 RHEL-32430]
  - x86/entry/32: Convert do_fast_syscall_32() to bool return type (Prarit Bhargava) [RHEL-45492 RHEL-25415]
  - x86/entry: Add do_SYSENTER_32() prototype (Prarit Bhargava) [RHEL-45492 RHEL-25415]
  - x86/bugs: Reset speculation control settings on init (Prarit Bhargava) [RHEL-45492 RHEL-25415]
  - mpls: Reduce skb re-allocations due to skb_cow() (Guillaume Nault) [RHEL-61696 RHEL-55145]
  - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-39539 RHEL-39601 RHEL-33543 RHEL-35000] {CVE-2024-26935}
  - tty: Fix out-of-bound vmalloc access in imageblit (Andrew Halaney) [RHEL-42095 RHEL-24205] {CVE-2021-47383}
  - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54769 RHEL-54768] {CVE-2024-43854}
  - block: cleanup bio_integrity_prep (Ming Lei) [RHEL-54769 RHEL-25988]
  - block: refactor to use helper (Ming Lei) [RHEL-54769 RHEL-25988]
  - ceph: fix cap ref leak via netfs init_request (Patrick Donnelly) [RHEL-62666 RHEL-61459]
  - redhat/configs: Enable CONFIG_OCTEON_EP_VF (CKI Backport Bot) [RHEL-61744 RHEL-25860]
  - octeon_ep_vf: add ethtool support (CKI Backport Bot) [RHEL-61744 RHEL-25860]
  - octeon_ep_vf: add Tx/Rx processing and interrupt support (CKI Backport Bot) [RHEL-61744 RHEL-25860]
  - octeon_ep_vf: add support for ndo ops (CKI Backport Bot) [RHEL-61744 RHEL-25860]
  - octeon_ep_vf: add Tx/Rx ring resource setup and cleanup (CKI Backport Bot) [RHEL-61744 RHEL-25860]
  - octeon_ep_vf: add VF-PF mailbox communication. (CKI Backport Bot) [RHEL-61744 RHEL-25860]
  - octeon_ep_vf: add hardware configuration APIs (CKI Backport Bot) [RHEL-61744 RHEL-25860]
  - octeon_ep_vf: Add driver framework and device initialization (CKI Backport Bot) [RHEL-61744 RHEL-25860]
  - octeon_ep: support firmware notifications for VFs (CKI Backport Bot) [RHEL-61744 RHEL-25860]
  - octeon_ep: control net framework to support VF offloads (CKI Backport Bot) [RHEL-61744 RHEL-25860]
  - octeon_ep: PF-VF mailbox version support (CKI Backport Bot) [RHEL-61744 RHEL-25860]
  - octeon_ep: add PF-VF mailbox communication (CKI Backport Bot) [RHEL-61744 RHEL-25860]
  - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Chris von Recklinghausen) [RHEL-62209 RHEL-26268]
  - netfilter: nfnetlink_queue: un-break NF_REPEAT (Phil Sutter) [RHEL-62299]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-503.3.1.el9_5]
changelog:
  - perf: Fix event leak upon exec and file release (Michael Petlan) [RHEL-55606] {CVE-2024-43869}
  - perf: Fix event leak upon exit (Michael Petlan) [RHEL-55603] {CVE-2024-43870}
  - task_work: Introduce task_work_cancel() again (Michael Petlan) [RHEL-55603]
  - task_work: s/task_work_cancel()/task_work_cancel_func()/ (Michael Petlan) [RHEL-55603]
  - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44213] {CVE-2024-38558}
  - net: drop bad gso csum_start and offset in virtio_net_hdr (Laurent Vivier) [RHEL-54891] {CVE-2024-43817}
  - net: change maximum number of UDP segments to 128 (Laurent Vivier) [RHEL-54891] {CVE-2024-43817}
  - net: more strict VIRTIO_NET_HDR_GSO_UDP_L4 validation (Laurent Vivier) [RHEL-54891] {CVE-2024-43817}
  - net: missing check virtio (Laurent Vivier) [RHEL-54891] {CVE-2024-43817}
  - fuse: Initialize beyond-EOF page contents before setting uptodate (CKI Backport Bot) [RHEL-56932] {CVE-2024-44947}
  - wifi: mac80211: Avoid address calculations via out of bounds array indexing (CKI Backport Bot) [RHEL-51285] {CVE-2024-41071}
  - nvme-pci: add missing condition check for existence of mapped data (Maurizio Lombardi) [RHEL-55099] {CVE-2024-42276}


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-503.4.1.el9_5]
changelog:
  - ice: fix VSI lists confusion when adding VLANs (Michal Schmidt) [RHEL-20571]
  - ice: fix accounting for filters shared by multiple VSIs (Michal Schmidt) [RHEL-20571]
  - nvme-multipath: fix io accounting on failover (John Meneghini) [RHEL-56635]
  - nvme: fix multipath batched completion accounting (John Meneghini) [RHEL-56635]
  - netfilter: tproxy: bail out if IP has been disabled on the device (Phil Sutter) [RHEL-44369] {CVE-2024-36270}
  - mm: list_lru: fix UAF for memory cgroup (Rafael Aquini) [RHEL-56160] {CVE-2024-43888}
  - platform/x86: dell-smbios-wmi: Avoid false-positive memcpy() warning (David Arcari) [RHEL-56614]
  - arm64: properly install vmlinuz.efi (Lenny Szubowicz) [RHEL-46772]
  - buildtar: fix tarballs with EFI_ZBOOT enabled (Lenny Szubowicz) [RHEL-46772]
  - wifi: iwlwifi: mvm: fix a crash on 7265 (Jose Ignacio Tornos Martinez) [RHEL-57681]
  - wifi: iwlwifi: mvm: support iwl_dev_tx_power_cmd_v8 (Jose Ignacio Tornos Martinez) [RHEL-57681]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-503.5.1.el9_5]
changelog:
  - kabi: enable check-kabi (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol zlib_inflate_workspacesize to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol zlib_inflateInit2 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol zlib_inflateEnd to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol zlib_inflate to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol zgid to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol zap_vma_ptes to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol yield to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xz_dec_run to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xz_dec_init to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xz_dec_end to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xsk_uses_need_wakeup to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xsk_tx_release to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xsk_tx_peek_desc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xsk_tx_completed to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xsk_set_tx_need_wakeup to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xsk_set_rx_need_wakeup to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xsk_get_pool_from_qid to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xsk_clear_rx_need_wakeup to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xp_set_rxq_info to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xp_raw_get_dma to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xp_free to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xp_dma_unmap to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xp_dma_sync_for_device_slow to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xp_dma_sync_for_cpu_slow to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xp_dma_map to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xp_alloc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xdp_warn to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xdp_set_features_flag to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xdp_rxq_info_unreg_mem_model to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xdp_rxq_info_unreg to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xdp_rxq_info_reg_mem_model to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __xdp_rxq_info_reg to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xdp_rxq_info_is_reg to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xdp_return_frame_rx_napi to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xdp_return_frame to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xdp_master_redirect to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xdp_features_set_redirect_target to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xdp_features_clear_redirect_target to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xdp_do_redirect to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xdp_do_flush to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xdp_convert_zc_to_xdp_frame to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xattr_full_name to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xa_store to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xas_find to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xa_set_mark to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xa_load to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __xa_insert to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xa_get_mark to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xa_find_after to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xa_find to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xa_erase to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xa_destroy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xa_clear_mark to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __xa_alloc_cyclic to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __xa_alloc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol x86_spec_ctrl_base to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __x86_return_thunk to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __x86_indirect_thunk_rsi to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __x86_indirect_thunk_rdx to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __x86_indirect_thunk_rdi to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __x86_indirect_thunk_rcx to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __x86_indirect_thunk_rbx to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __x86_indirect_thunk_rbp to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __x86_indirect_thunk_rax to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __x86_indirect_thunk_r9 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __x86_indirect_thunk_r8 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __x86_indirect_thunk_r15 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __x86_indirect_thunk_r14 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __x86_indirect_thunk_r13 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __x86_indirect_thunk_r12 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __x86_indirect_thunk_r11 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __x86_indirect_thunk_r10 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol x86_cpu_to_apicid to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __write_overflow_field to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol write_inode_now to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __warn_printk to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol wake_up_process to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __wake_up to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __wait_on_buffer to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol wait_for_completion_timeout to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol wait_for_completion_interruptible to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol wait_for_completion to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vzalloc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vsprintf to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vsnprintf to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vscnprintf to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vprintk to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vm_zone_stat to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vm_munmap to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vm_mmap to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vm_event_states to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vmemmap_base to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vmalloc_to_page to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vmalloc_node to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vmalloc_base to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vmalloc_32 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vmalloc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __vmalloc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vlan_dev_vlan_proto to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vlan_dev_vlan_id to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vlan_dev_real_dev to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __virt_addr_valid to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vfs_unlink to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vfs_symlink to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vfs_statfs to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __vfs_setxattr to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vfs_rmdir to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vfs_rename to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __vfs_removexattr to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vfs_readlink to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vfs_mknod to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vfs_mkdir to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vfs_llseek to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vfs_link to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vfs_iter_write to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vfs_iter_read to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __vfs_getxattr to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vfs_get_link to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vfs_getattr to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vfs_fsync_range to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vfs_fsync to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vfs_create to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vfree to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __var_waitqueue to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol uv_undefined to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol uv_teardown_irq to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol uv_setup_irq to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol uv_possible_blades to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __uv_hub_info_list to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol uv_get_hubless_system to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __uv_cpu_info to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol uv_bios_obj_count to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol uv_bios_install_heap to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol uv_bios_get_pci_topology to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol uv_bios_get_master_nasid to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol uv_bios_get_heapsize to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol uv_bios_get_geoinfo to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol uv_bios_enum_ports to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol uv_bios_enum_objs to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol usleep_range_state to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol up_write to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol up_read to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol up to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol unregister_sysctl_table to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol unregister_switchdev_notifier to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol unregister_switchdev_blocking_notifier to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol unregister_shrinker to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol unregister_reboot_notifier to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol unregister_nmi_handler to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol unregister_netevent_notifier to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol unregister_netdevice_notifier_net to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol unregister_netdevice_notifier_dev_net to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol unregister_netdevice_notifier to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol unregister_netdev to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol unregister_kprobe to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol unregister_inetaddr_notifier to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol unregister_inet6addr_notifier to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol unregister_filesystem to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol unregister_fib_notifier to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol unregister_chrdev_region to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __unregister_chrdev to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol unregister_blkdev to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol unregister_binfmt to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol unmap_mapping_range to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol unlock_page to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol udp_tunnel_nic_ops to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol udp4_hwcsum to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __udelay to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol tty_unregister_driver to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol tty_termios_encode_baud_rate to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol tty_std_termios to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol tty_register_driver to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol tty_port_link_device to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol tty_port_init to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol tty_port_destroy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __tty_insert_flip_string_flags to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol tty_flip_buffer_push to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol tty_driver_kref_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol tty_buffer_request_room to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __tty_alloc_driver to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol tsc_khz to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol try_wait_for_completion to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol try_module_get to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol truncate_pagecache to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol truncate_inode_pages_range to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol truncate_inode_pages_final to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol truncate_inode_pages to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol trace_seq_putc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol trace_seq_printf to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol trace_raw_output_prep to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol trace_print_flags_seq to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __tracepoint_xdp_exception to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __tracepoint_mmap_lock_start_locking to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __tracepoint_mmap_lock_released to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __tracepoint_mmap_lock_acquire_returned to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol trace_handle_return to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol trace_event_reg to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol trace_event_raw_init to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol trace_event_printf to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol trace_event_ignore_this_pid to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol trace_event_buffer_reserve to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol trace_event_buffer_commit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol touch_softlockup_watchdog to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _totalram_pages to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol tls_validate_xmit_skb to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol tls_get_record to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol timer_delete_sync to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol timer_delete to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol timecounter_read to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol timecounter_init to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol timecounter_cyc2time to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol time64_to_tm to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol this_cpu_off to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol thaw_bdev to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol tcp_hashinfo to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __task_pid_nr_ns to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol tasklet_unlock_wait to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol tasklet_setup to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __tasklet_schedule to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol tasklet_kill to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol tasklet_init to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __tasklet_hi_schedule to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sys_tz to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol system_wq to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol system_state to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sysfs_streq to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sysfs_remove_group to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sysfs_remove_file_ns to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sysfs_remove_bin_file to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __sysfs_match_string to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sysfs_emit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sysfs_create_group to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sysfs_create_file_ns to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sysfs_create_bin_file to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sysfs_add_file_to_group to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sync_mapping_buffers to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol synchronize_rcu to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol synchronize_net to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol synchronize_irq to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sync_blockdev to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __symbol_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __symbol_get to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __sw_hweight64 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __sw_hweight32 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol submit_bio_noacct to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol submit_bio to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol strstr to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol strsep to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol strrchr to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol strnlen_user to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol strnlen to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol strncpy_from_user to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol strncpy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol strncmp to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol strncasecmp to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol strlen to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol strlcpy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol strlcat to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol strim to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol strcspn to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol strcpy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol strcmp to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol strchr to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol strcat to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol static_key_slow_inc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol static_key_slow_dec to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol static_key_count to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __stack_chk_fail to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sscanf to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sprintf to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sort to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol softnet_data to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sock_setsockopt to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sock_sendmsg to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sock_release to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sock_recvmsg to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sock_gen_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sock_create_kern to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sock_create to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sock_alloc_file to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sn_region_size to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol snprintf to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sn_partition_id to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol smp_call_function_single_async to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol smp_call_function_single to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol smp_call_function_many to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sme_me_mask to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sk_free to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol skb_vlan_pop to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol skb_tstamp_tx to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __skb_recv_udp to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol skb_realloc_headroom to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol skb_queue_tail to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol skb_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol skb_push to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol skb_pull to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __skb_pad to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __skb_flow_dissect to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol skb_ext_add to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol skb_dequeue to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol skb_copy_bits to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol skb_copy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol skb_clone_tx_timestamp to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol skb_clone to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol skb_checksum_help to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol skb_checksum to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol skb_add_rx_frag to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sk_alloc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sized_strscpy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol single_release to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol single_open_size to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol single_open to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol simple_write_to_buffer to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol simple_strtoull to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol simple_strtoul to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol simple_strtol to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol simple_statfs to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol simple_read_from_buffer to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol simple_open to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol simple_attr_release to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol simple_attr_open to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol si_meminfo to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sigprocmask to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol shrink_dcache_sb to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol shrink_dcache_parent to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __sg_page_iter_start to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __sg_page_iter_dma_next to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sg_next to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sget to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sg_copy_to_buffer to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sg_copy_from_buffer to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol set_user_nice to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol set_page_writeback to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __set_page_dirty_nobuffers to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol set_page_dirty_lock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol set_page_dirty to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol set_normalized_timespec64 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol set_nlink to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol set_freezable to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol set_disk_ro to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol set_current_groups to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol set_cpus_allowed_ptr to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol set_capacity to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol set_blocksize to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol setattr_prepare to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol seq_write to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol seq_release to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol seq_read to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol seq_puts to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol seq_putc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol seq_printf to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol seq_open to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol seq_lseek to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol send_sig_info to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol send_sig to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol security_sb_set_mnt_opts to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol security_sb_eat_lsm_opts to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol security_inode_init_security to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol security_free_mnt_opts to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol security_d_instantiate to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sdev_prefix_printk to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __SCT__tp_func_xdp_exception to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __SCT__preempt_schedule_notrace to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __SCT__preempt_schedule to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __SCT__might_resched to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __SCT__cond_resched to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol scsi_vpd_lun_id to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol scsi_remove_host to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol scsi_remove_device to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol scsi_register_driver to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol scsilun_to_int to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol scsi_is_sdev_device to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol scsi_is_fc_rport to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol scsi_host_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol scsi_host_lookup to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol scsi_host_busy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol scsi_host_alloc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol scsi_done to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol scsi_device_type to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol scsi_device_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol scsi_device_get to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol scsi_command_size_tbl to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol scsi_change_queue_depth to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol scsicam_bios_param to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol scsi_bus_type to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol scsi_alloc_request to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol scsi_add_host_with_dma to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol scsi_add_device to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol scnprintf to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __SCK__tp_func_xdp_exception to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol schedule_timeout to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol schedule to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sched_numa_hop_mask to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sched_clock_cpu to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sched_clock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rtnl_unlock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rtnl_trylock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rtnl_lock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rtnl_is_locked to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rps_may_expire_flow to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol round_jiffies to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol root_device_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __root_device_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rht_bucket_nested_insert to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rht_bucket_nested to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __rht_bucket_nested to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rhltable_init to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rhashtable_insert_slow to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rhashtable_init to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rhashtable_free_and_destroy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rhashtable_destroy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol revert_creds to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol request_threaded_irq to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __request_region to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __request_module to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol request_firmware_direct to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol request_firmware to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol remove_wait_queue to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol remove_proc_entry to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol remap_pfn_range to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol release_sock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __release_region to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol release_firmware to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol register_sysctl_table to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol register_switchdev_notifier to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol register_switchdev_blocking_notifier to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol register_shrinker to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol register_reboot_notifier to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __register_nmi_handler to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol register_netevent_notifier to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol register_netdevice_notifier_net to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol register_netdevice_notifier_dev_net to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol register_netdevice_notifier to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol register_netdevice to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol register_netdev to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol register_kprobe to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol register_inetaddr_notifier to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol register_inet6addr_notifier to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol register_filesystem to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol register_fib_notifier to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol register_chrdev_region to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __register_chrdev to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __register_blkdev to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __register_binfmt to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __refrigerator to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol refcount_warn_saturate to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol refcount_dec_if_one to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol refcount_dec_and_mutex_lock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol recalc_sigpending to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __read_overflow2_field to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rdma_user_mmap_io to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rdma_user_mmap_entry_remove to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rdma_user_mmap_entry_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rdma_user_mmap_entry_insert to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rdma_user_mmap_entry_get to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rdma_resolve_route to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rdma_resolve_addr to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rdma_reject to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rdma_read_gid_l2_fields to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rdma_query_gid to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rdma_listen to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rdma_disconnect to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rdma_destroy_qp to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rdma_destroy_id to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rdma_create_qp to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __rdma_create_kernel_id to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rdma_connect to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rdma_bind_addr to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rdma_alloc_hw_stats_struct to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rdma_accept to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rcuref_get_slowpath to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rcu_read_unlock_strict to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __rcu_read_unlock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __rcu_read_lock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rcu_barrier to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rb_next to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rb_insert_color to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rb_first to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rb_erase to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_write_unlock_irqrestore to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_write_unlock_irq to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_write_unlock_bh to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_write_unlock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_write_trylock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_write_lock_irqsave to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_write_lock_irq to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_write_lock_bh to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_write_lock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_spin_unlock_irqrestore to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_spin_unlock_irq to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_spin_unlock_bh to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_spin_unlock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_spin_trylock_bh to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_spin_trylock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_spin_lock_irqsave to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_spin_lock_irq to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_spin_lock_bh to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_spin_lock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_read_unlock_irqrestore to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_read_unlock_irq to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_read_unlock_bh to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_read_unlock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_read_lock_irqsave to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_read_lock_irq to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_read_lock_bh to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_read_lock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ___ratelimit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol radix_tree_tag_set to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol radix_tree_next_chunk to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol radix_tree_lookup to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol radix_tree_insert to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol radix_tree_delete to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol queue_work_on to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol queue_delayed_work_on to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol qed_put_iscsi_ops to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol qed_put_eth_ops to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol qdisc_reset to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pv_ops to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __put_user_8 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __put_user_4 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __put_user_2 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol put_unused_fd to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol put_disk to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __put_devmap_managed_page_refs to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol put_device to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __put_cred to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ptrs_per_p4d to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ptp_schedule_worker to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ptp_parse_header to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ptp_find_pin to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ptp_clock_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ptp_clock_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ptp_clock_index to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ptp_clock_event to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ptp_classify_raw to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ___pskb_trim to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __pskb_pull_tail to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pskb_expand_head to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol psample_sample_packet to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol proc_remove to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol proc_mkdir_mode to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol proc_mkdir to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol proc_dostring to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol proc_dointvec_minmax to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol proc_dointvec to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol proc_create_data to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol proc_create to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol priv_to_devlink to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __printk_ratelimit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _printk to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol print_hex_dump to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol prepare_to_wait_exclusive to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol prepare_to_wait_event to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol prepare_to_wait to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol prepare_creds to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol posix_test_lock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol posix_lock_file to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol posix_acl_valid to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol posix_acl_to_xattr to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol posix_acl_from_xattr to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol posix_acl_alloc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol poll_initwait to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol poll_freewait to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pm_schedule_suspend to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __pm_runtime_resume to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pldmfw_op_pci_match_record to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pldmfw_flash_image to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pipe_unlock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pipe_lock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pid_task to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol physical_mask to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol phys_base to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pgprot_writecombine to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pgdir_shift to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol perf_trace_run_bpf_submit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol perf_trace_buf_alloc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol percpu_ref_init to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol percpu_ref_exit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __per_cpu_offset to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pcpu_hot to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_write_config_word to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_write_config_dword to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_wake_from_d3 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_wait_for_pending_transaction to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_vfs_assigned to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_unregister_driver to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_sriov_set_totalvfs to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_sriov_get_totalvfs to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_set_power_state to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_set_master to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_select_bars to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_save_state to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_restore_state to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_restore_msi_state to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_request_selected_regions to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_request_regions to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_release_selected_regions to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_release_regions to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __pci_register_driver to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_read_config_word to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_read_config_dword to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_read_config_byte to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_prepare_to_sleep to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_num_vf to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_msix_free_irq to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_msix_can_alloc_dyn to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_msix_alloc_irq_at to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_irq_vector to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_iov_virtfn_devfn to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_iov_vf_id to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_iov_get_pf_drvdata to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_iounmap to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_ioremap_bar to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_iomap to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_get_dsn to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_get_device to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_free_irq_vectors to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_find_ext_capability to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_find_capability to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pcie_relaxed_ordering_enabled to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pcie_ptm_enabled to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pcie_print_link_status to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_enable_wake to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_enable_sriov to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_enable_ptm to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_enable_msix_range to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_enable_msi to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_enable_device_mem to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_enable_device to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_enable_atomic_ops_to_root to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pcie_flr to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pcie_capability_read_word to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pcie_capability_read_dword to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pcie_bandwidth_available to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_disable_sriov to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_disable_msix to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_disable_msi to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_disable_link_state to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_disable_device to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_dev_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_device_is_present to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_dev_get to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_dev_driver to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_clear_master to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_cfg_access_unlock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_cfg_access_lock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_bus_type to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_alloc_irq_vectors to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_aer_clear_nonfatal_status to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol path_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol param_set_int to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol param_set_bool to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol param_ops_ushort to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol param_ops_ulong to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol param_ops_uint to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol param_ops_string to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol param_ops_short to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol param_ops_long to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol param_ops_int to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol param_ops_charp to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol param_ops_byte to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol param_ops_bool to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol param_get_int to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol param_array_ops to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol panic_notifier_list to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol panic to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __pagevec_release to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pagevec_lookup_range_tag to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol page_pool_update_nid to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol page_pool_get_stats to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol page_pool_destroy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol page_pool_create to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol page_pool_alloc_pages to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol page_offset_base to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol page_frag_free to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __page_frag_cache_drain to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pagecache_get_page to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol override_creds to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol on_each_cpu_cond_mask to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __num_online_cpus to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol numa_node to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ns_to_timespec64 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol nr_cpu_ids to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol notify_change to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol noop_llseek to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol node_to_cpumask_map to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol node_states to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __node_distance to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol node_data to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol nla_find to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol new_inode to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol net_ratelimit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netif_tx_wake_queue to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netif_tx_unlock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netif_tx_stop_all_queues to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netif_tx_lock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netif_set_xps_queue to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netif_set_tso_max_size to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netif_set_real_num_tx_queues to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netif_set_real_num_rx_queues to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netif_schedule_queue to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netif_rx to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __netif_napi_del to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netif_napi_add_weight to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netif_device_detach to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netif_device_attach to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netif_carrier_on to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netif_carrier_off to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netif_carrier_event to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol net_dim to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_warn to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_update_features to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_unbind_sb_channel to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_state_change to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_set_tc_queue to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_set_sb_channel to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_set_num_tc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_rx_handler_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_rx_handler_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_rss_key_fill to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_reset_tc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_refcnt_read to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_printk to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_port_same_parent_id to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_pick_tx to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_notice to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_master_upper_dev_get_rcu to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_master_upper_dev_get to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_lower_get_next to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_info to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_features_change to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_err to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_crit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_bind_sb_channel_queue to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __netdev_alloc_skb to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol neigh_lookup to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __neigh_event_send to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol neigh_destroy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ndo_dflt_fdb_add to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ndo_dflt_bridge_getlink to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __ndelay to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol napi_schedule_prep to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __napi_schedule_irqoff to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __napi_schedule to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol napi_gro_receive to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol napi_enable to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol napi_disable to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol napi_consume_skb to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol napi_complete_done to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol napi_busy_loop to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol napi_build_skb to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol napi_alloc_skb to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol names_cachep to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mutex_unlock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mutex_trylock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mutex_lock_interruptible to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mutex_lock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mutex_is_locked to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __mutex_init to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol msleep_interruptible to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol msleep to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __msecs_to_jiffies to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mpage_writepages to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mpage_readahead to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mount_nodev to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mount_bdev to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol module_refcount to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol module_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol module_layout to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __module_get to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mod_timer to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mod_delayed_work_on to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mntput to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mntget to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mmu_notifier_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mmu_notifier_get_locked to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mmput to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __mmap_lock_do_trace_start_locking to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __mmap_lock_do_trace_released to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __mmap_lock_do_trace_acquire_returned to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mlxfw_firmware_flash to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol misc_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol misc_deregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol metadata_dst_free to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol metadata_dst_alloc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol memset to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mem_section to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mempool_free_slab to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mempool_free to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mempool_destroy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mempool_create_node to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mempool_create to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mempool_alloc_slab to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mempool_alloc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol memparse to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol memory_read_from_buffer to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol memmove to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol memdup_user to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol memcpy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol memcmp to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol memchr_inv to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mds_idle_clear to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mark_page_accessed to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __mark_inode_dirty to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mark_buffer_dirty to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol loops_per_jiffy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol lookup_one_len to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol lookup_bdev to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol lock_sock_nested to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol locks_lock_inode_wait to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol locks_delete_block to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol lockref_get to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __local_bh_enable_ip to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol llist_add_batch to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __list_del_entry_valid to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __list_add_valid to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kvmalloc_node to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kvfree_call_rcu to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kvfree to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ktime_get_with_offset to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ktime_get_ts64 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ktime_get_snapshot to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ktime_get_real_ts64 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ktime_get_real_seconds to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ktime_get_coarse_real_ts64 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ktime_get to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kthread_use_mm to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kthread_unuse_mm to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kthread_stop to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kthread_should_stop to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kthread_queue_work to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kthread_queue_delayed_work to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kthread_destroy_worker to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kthread_delayed_work_timer_fn to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kthread_create_worker to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kthread_create_on_node to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kthread_complete_and_exit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kthread_cancel_work_sync to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kthread_cancel_delayed_work_sync to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kthread_bind to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kstrtoull to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kstrtouint to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kstrtou8 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kstrtou16 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kstrtos16 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kstrtoll to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kstrtoint to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kstrtobool to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kstrdup to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol krealloc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kobject_uevent_env to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kobject_uevent to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kobject_set_name to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kobject_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kobject_init_and_add to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kobject_get_unless_zero to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kobject_create_and_add to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kmemdup to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kmem_cache_shrink to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kmem_cache_free to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kmem_cache_destroy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kmem_cache_create_usercopy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kmem_cache_create to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kmem_cache_alloc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kmalloc_trace to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kmalloc_node_trace to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __kmalloc_node to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kmalloc_large to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kmalloc_caches to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __kmalloc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kill_pid to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kill_pgrp to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kill_fasync to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kill_block_super to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kill_anon_super to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kfree to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kexec_crash_loaded to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kern_path_create to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kern_path to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kernel_write to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kernel_sigaction to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kernel_sendmsg to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kernel_recvmsg to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kernel_read to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kernel_fpu_end to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kernel_fpu_begin_mask to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kblockd_schedule_work to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kasprintf to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol jiffies_to_usecs to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol jiffies_to_msecs to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol jiffies_64 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol jiffies to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol iter_file_splice_write to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol iterate_dir to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol is_vmalloc_addr to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol is_uv_system to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol iscsi_boot_create_host_kset to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol irq_set_affinity_notifier to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol irq_poll_enable to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol irq_poll_disable to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol irq_get_irq_data to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol irq_cpu_rmap_add to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __irq_apply_affinity_hint to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ipv6_stub to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ipv6_skip_exthdr to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ipv6_find_hdr to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ipv6_chk_addr to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __ipv6_addr_type to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol iput to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ip_tos2prio to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ip_send_check to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ip_route_output_flow to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ip_queue_xmit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __ip_dev_find to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ip6_route_output_flags to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ip6_dst_hoplimit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol iowrite32be to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol iov_iter_kvec to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol iov_iter_init to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol iov_iter_advance to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol iounmap to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ioremap_wc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ioremap to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ioread8 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ioread32be to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ioread16be to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol iomem_resource to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol invalidate_mapping_pages to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol invalidate_inode_pages2_range to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol invalidate_bdev to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol int_to_scsilun to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol int_pow to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __insert_inode_hash to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol inode_permission to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol inode_init_always to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol init_wait_var_entry to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __init_waitqueue_head to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol init_wait_entry to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol init_uts_ns to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol init_user_ns to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol init_timer_key to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol init_task to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __init_swait_queue_head to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol init_special_inode to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __init_rwsem to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol init_net to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol in_group_p to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol inet_del_protocol to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol inet_add_protocol to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol in_dev_finish_destroy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol in_aton to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol in6_pton to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol in4_pton to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol import_iovec to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ilookup to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol igrab to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol idr_remove to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol idr_preload to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol idr_get_next_ul to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol idr_find to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol idr_destroy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol idr_alloc_u32 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol idr_alloc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ida_free to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ida_destroy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ida_alloc_range to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ib_unregister_device to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ib_umem_release to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ib_umem_get to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ib_umem_find_best_pgsz to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ib_umem_dmabuf_get_pinned to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ib_sg_to_pages to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ib_set_device_ops to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ib_resize_cq to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ib_register_device to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ib_query_port to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ib_modify_qp_is_ok to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ib_get_eth_speed to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ib_dispatch_event to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ibdev_warn to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ibdev_info to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ib_device_set_netdev to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ib_device_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ib_device_get_by_netdev to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ibdev_err to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol I_BDEV to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ib_destroy_cq_user to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ib_dereg_mr_user to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ib_dealloc_pd_user to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ib_dealloc_device to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __ib_create_cq to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __ib_alloc_pd to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _ib_alloc_device to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol hyperv_write_cfg_blk to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol hyperv_reg_block_invalidate to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol hyperv_read_cfg_blk to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol hwmon_device_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol hwmon_device_register_with_info to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol hwmon_device_register_with_groups to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __hw_addr_unsync_dev to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __hw_addr_sync_dev to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __hw_addr_init to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol hugetlb_optimize_vmemmap_key to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol hrtimer_start_range_ns to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol hrtimer_init to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol hrtimer_forward to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol hrtimer_cancel to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol hex_dump_to_buffer to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol groups_free to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol groups_alloc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol gnss_register_device to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol gnss_put_device to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol gnss_insert_raw to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol gnss_deregister_device to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol gnss_allocate_device to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol get_zeroed_page to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol get_user_pages_remote to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol get_user_pages to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __get_user_nocheck_1 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __get_user_2 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __get_user_1 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol get_unused_fd_flags to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol get_random_bytes to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol get_fs_type to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __get_free_pages to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol get_device_system_crosststamp to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol get_device to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol generic_write_end to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol generic_write_checks to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol generic_shutdown_super to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol generic_setlease to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol generic_read_dir to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol generic_pipe_buf_get to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol generic_permission to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol generic_fillattr to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol generic_file_write_iter to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __generic_file_write_iter to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol generic_file_splice_read to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol generic_file_read_iter to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol generic_file_open to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol generic_file_llseek to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol generic_error_remove_page to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol generic_delete_inode to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol gcd to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol fs_bio_set to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol freezing_slow_path to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol freeze_bdev to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol free_percpu to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol free_pages to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __free_pages to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol free_netdev to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol free_irq_cpu_rmap to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol free_irq to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol free_fib_info to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol free_cpumask_var to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol fput to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol fortify_panic to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol forget_all_cached_acls to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol follow_up to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol folio_wait_bit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __folio_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __folio_lock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __folio_cancel_dirty to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __flush_workqueue to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flush_work to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flush_signals to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_rule_match_vlan to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_rule_match_pppoe to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_rule_match_ports to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_rule_match_ipv6_addrs to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_rule_match_ipv4_addrs to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_rule_match_ip to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_rule_match_eth_addrs to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_rule_match_enc_ports to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_rule_match_enc_keyid to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_rule_match_enc_ipv6_addrs to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_rule_match_enc_ipv4_addrs to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_rule_match_enc_ip to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_rule_match_enc_control to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_rule_match_cvlan to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_rule_match_control to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_rule_match_basic to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_keys_dissector to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_indr_dev_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_indr_dev_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_indr_block_cb_alloc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_block_cb_setup_simple to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_block_cb_lookup to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_block_cb_free to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_block_cb_alloc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol firmware_request_nowarn to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol finish_wait to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol finish_open to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol finish_no_open to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol find_vma to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol find_pid_ns to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _find_next_zero_bit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _find_next_bit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _find_next_andnot_bit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _find_next_and_bit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _find_last_bit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol find_get_pid to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol find_get_pages_range_tag to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _find_first_zero_bit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _find_first_bit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol filp_open to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol filp_close to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol file_write_and_wait_range to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol file_ns_capable to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol filemap_write_and_wait_range to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol filemap_fault to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol file_bdev to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol fget to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __fentry__ to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol fd_install to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol event_triggers_call to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol eth_validate_addr to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol eth_type_trans to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ethtool_sprintf to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ethtool_op_get_ts_info to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ethtool_op_get_link to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ethtool_intersect_link_masks to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ethtool_convert_link_mode_to_legacy_u32 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ethtool_convert_legacy_u32_to_link_mode to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol eth_platform_get_mac_address to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol eth_get_headlen to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ether_setup to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol end_page_writeback to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol enable_irq to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol empty_zero_page to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol emergency_restart to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol elfcorehdr_addr to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol efi to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __dynamic_pr_debug to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __dynamic_netdev_dbg to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __dynamic_ibdev_dbg to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __dynamic_dev_dbg to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dump_stack to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dst_release to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol d_set_d_op to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol drop_super to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol driver_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol driver_remove_file to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol driver_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol driver_for_each_device to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol driver_create_file to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol d_rehash to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dql_reset to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dql_completed to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dput to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol d_prune_aliases to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dpll_pin_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dpll_pin_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dpll_pin_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dpll_pin_on_pin_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dpll_pin_on_pin_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dpll_pin_get to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dpll_pin_change_ntf to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dpll_netdev_pin_set to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dpll_netdev_pin_clear to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dpll_device_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dpll_device_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dpll_device_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dpll_device_get to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dpll_device_change_ntf to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol d_path to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol down_write_trylock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol down_write to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol down_trylock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol down_read_trylock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol down_read to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol down_interruptible to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol downgrade_write to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol down to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol do_trace_netlink_extack to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol done_path_create to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol d_obtain_alias to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol d_move to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dmi_get_system_info to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dmi_find_device to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dma_unmap_page_attrs to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dma_set_mask to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dma_set_coherent_mask to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dma_pool_free to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dma_pool_destroy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dma_pool_create to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dma_pool_alloc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dmam_free_coherent to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dma_map_page_attrs to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dmam_alloc_attrs to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol d_make_root to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dma_free_attrs to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dma_alloc_attrs to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol disable_irq to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol d_invalidate to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol d_instantiate to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol d_hash_and_lookup to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dget_parent to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol d_find_alias to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _dev_warn to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_uc_del to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_uc_add_excl to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_uc_add to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_set_promiscuity to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_set_name to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_set_mtu to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_set_mac_address to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_remove_pack to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __dev_queue_xmit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_printk_emit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_open to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devm_request_threaded_irq to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devm_kmemdup to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devm_kmalloc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devm_kfree to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devm_kasprintf to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devm_hwmon_device_register_with_groups to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devm_free_irq to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_mc_del_global to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_mc_del to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_mc_add_global to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_mc_add_excl to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_mc_add to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devmap_managed_key to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __devm_add_action to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devl_unlock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devl_traps_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devl_traps_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devl_trap_groups_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devl_trap_groups_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devl_resources_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devl_resource_size_get to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devl_resource_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devl_rate_nodes_destroy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devl_rate_node_create to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devl_rate_leaf_destroy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devl_rate_leaf_create to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devl_port_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devl_port_health_reporter_create to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devl_params_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devl_params_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devl_param_driverinit_value_set to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devl_param_driverinit_value_get to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devl_lock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_trap_report to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_to_dev to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_resources_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_resource_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_resource_occ_get_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_resource_occ_get_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_remote_reload_actions_performed to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_region_destroy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_region_create to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_priv to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_port_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_port_type_clear to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_port_register_with_ops to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_port_health_reporter_create to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_port_attrs_set to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_port_attrs_pci_vf_set to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_port_attrs_pci_sf_set to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_port_attrs_pci_pf_set to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_params_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_params_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_net to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_info_version_stored_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_info_version_running_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_info_version_fixed_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_info_serial_number_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_health_reporter_state_update to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_health_reporter_priv to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_health_reporter_destroy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_health_reporter_create to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_health_report to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_free to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_fmsg_u8_pair_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_fmsg_u64_pair_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_fmsg_u32_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_fmsg_u32_pair_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_fmsg_string_pair_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_fmsg_pair_nest_start to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_fmsg_pair_nest_end to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_fmsg_obj_nest_start to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_fmsg_obj_nest_end to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_fmsg_bool_pair_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_fmsg_binary_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_fmsg_binary_pair_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_fmsg_binary_pair_nest_start to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_fmsg_binary_pair_nest_end to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_fmsg_arr_pair_nest_start to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_fmsg_arr_pair_nest_end to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_flash_update_timeout_notify to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_flash_update_status_notify to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_alloc_ns to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devl_health_reporter_destroy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devl_health_reporter_create to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devl_assert_locked to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_kfree_skb_irq_reason to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_kfree_skb_any_reason to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _dev_info to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol device_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol device_set_wakeup_enable to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol device_remove_file to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol device_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol device_destroy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol device_del to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol device_create_file to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol device_create to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol device_add_disk to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_get_stats to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_get_iflink to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_get_by_name to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_get_by_index_rcu to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_get_by_index to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _dev_err to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_driver_string to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _dev_crit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_close to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_change_flags to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_base_lock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_addr_del to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_addr_add to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_add_pack to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol destroy_workqueue to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __destroy_inode to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dentry_open to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol del_gendisk to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol delayed_work_timer_fn to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __delay to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol default_wake_function to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol default_llseek to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dec_zone_page_state to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol debugfs_remove to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol debugfs_lookup_and_remove to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol debugfs_lookup to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol debugfs_create_x32 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol debugfs_create_u8 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol debugfs_create_u64 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol debugfs_create_u32 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol debugfs_create_size_t to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol debugfs_create_file_unsafe to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol debugfs_create_file to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol debugfs_create_dir to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol debugfs_create_blob to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol debugfs_create_atomic_t to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol debugfs_attr_write to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol debugfs_attr_read to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol deactivate_super to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol d_drop to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __d_drop to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dcb_setapp to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dcbnl_ieee_notify to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dcb_ieee_setapp to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dcb_ieee_delapp to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dcb_getapp to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dca_unregister_notify to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dca_remove_requester to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dca_register_notify to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dca_add_requester to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dca3_get_tag to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol d_alloc_anon to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol d_add to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol current_umask to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol current_time to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _ctype to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol csum_partial to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol csum_ipv6_magic to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol crypto_shash_update to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol crypto_shash_final to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol crypto_destroy_tfm to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol crypto_alloc_shash to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol create_empty_buffers to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol crc32_le to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol cpu_sibling_map to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __cpu_present_mask to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __cpu_possible_mask to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __cpu_online_mask to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol cpu_number to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol cpumask_local_spread to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol cpu_khz to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol cpu_info to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __cpuhp_setup_state to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __cpuhp_remove_state to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol cpufreq_quick_get to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol cpu_bit_bitmap to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol copy_user_generic_unrolled to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol copy_user_generic_string to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol copy_user_enhanced_fast_string to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _copy_to_user to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _copy_to_iter to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __copy_overflow to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _copy_from_user to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _copy_from_iter to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol convert_art_ns_to_tsc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol consume_skb to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __const_udelay to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol config_group_init_type_name to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol config_group_init to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol configfs_unregister_subsystem to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol configfs_register_subsystem to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __cond_resched to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol complete_all to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol complete to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol commit_creds to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol clock_t_to_jiffies to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol clear_page_dirty_for_io to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol clear_nlink to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol clear_inode to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol class_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol class_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol class_destroy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __check_object_size to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol cdev_init to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol cdev_del to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol cdev_alloc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol cdev_add to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol cc_mkdec to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol capable to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol cancel_work_sync to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol cancel_work to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol cancel_delayed_work_sync to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol cancel_delayed_work to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol call_usermodehelper to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol call_switchdev_notifiers to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol call_srcu to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol call_rcu to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol call_netdevice_notifiers to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol cachemode2protval to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bus_unregister_notifier to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bus_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bus_register_notifier to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bus_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bus_for_each_dev to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bus_find_device to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol build_skb to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __break_lease to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bpf_warn_invalid_xdp_action to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bpf_trace_run7 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bpf_trace_run5 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bpf_trace_run4 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bpf_trace_run3 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bpf_trace_run2 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bpf_trace_run1 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bpf_stats_enabled_key to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bpf_prog_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bpf_prog_inc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bpf_prog_add to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bpf_master_redirect_enabled_key to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bpf_dispatcher_xdp_func to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol boot_cpu_data to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol block_write_full_page to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol block_write_begin to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blocking_notifier_chain_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blocking_notifier_chain_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blocking_notifier_call_chain to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blockdev_superblock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_status_to_errno to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_start_plug to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_stack_limits to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_set_queue_depth to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_rq_map_user_iov to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_rq_map_user to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __blk_rq_map_sg to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_rq_map_kern to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_queue_segment_boundary to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_queue_physical_block_size to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_queue_max_segments to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_queue_max_hw_sectors to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_queue_max_discard_sectors to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_queue_logical_block_size to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_queue_io_opt to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_queue_io_min to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_queue_flag_set to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_queue_flag_clear to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_queue_dma_alignment to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_queue_bounce_limit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_put_queue to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_mq_unfreeze_queue to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_mq_stop_hw_queues to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_mq_start_request to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_mq_run_hw_queues to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_mq_run_hw_queue to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_mq_map_queues to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_mq_init_queue to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_mq_init_allocated_queue to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_mq_freeze_queue to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_mq_free_tag_set to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_mq_free_request to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_mq_end_request to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __blk_mq_end_request to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_mq_destroy_queue to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_mq_complete_request to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_mq_alloc_tag_set to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_mq_alloc_request to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_integrity_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_finish_plug to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_execute_rq to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blkdev_issue_flush to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __blk_alloc_disk to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bitmap_zalloc_node to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bitmap_zalloc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __bitmap_xor to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __bitmap_weight to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __bitmap_subset to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __bitmap_set to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bitmap_release_region to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bitmap_print_to_pagebuf to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bitmap_parselist to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __bitmap_or to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __bitmap_intersects to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bitmap_from_arr32 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bitmap_free to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bitmap_find_next_zero_area_off to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bitmap_find_free_region to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __bitmap_equal to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __bitmap_clear to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __bitmap_andnot to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __bitmap_and to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bioset_init to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bioset_exit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bio_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bio_kmalloc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bio_integrity_prep to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bio_init to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bio_endio to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bio_clone_blkg_association to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bio_associate_blkg to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bio_alloc_clone to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bio_alloc_bioset to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bio_add_page to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bin2hex to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bdev_file_open_by_path to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bdev_file_open_by_dev to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol balance_dirty_pages_ratelimited to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol avenrun to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol auxiliary_driver_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __auxiliary_driver_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol auxiliary_device_init to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __auxiliary_device_add to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol autoremove_wake_function to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol atomic_notifier_chain_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol atomic_notifier_chain_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol atomic_notifier_call_chain to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _atomic_dec_and_lock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol async_synchronize_full_domain to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol async_synchronize_full to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol async_schedule_node to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol arp_tbl to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol argv_split to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol argv_free to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol arch_touch_nmi_watchdog to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol alloc_workqueue to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __alloc_skb to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __alloc_percpu_gfp to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __alloc_percpu to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol alloc_pages to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __alloc_pages to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol alloc_netdev_mqs to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol alloc_etherdev_mqs to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol alloc_cpu_rmap to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol alloc_chrdev_region to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol add_wait_queue_exclusive to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol add_wait_queue to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol add_timer to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol acpi_get_table to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol acpi_disabled to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol abort_creds to stablelist (Čestmír Kalina) [RHEL-56065]


