-
Mon Sep 15 2025 Codrin Pruteanu <codrin.pruteanu@oracle.com> [5.14.0-570.44.1.0.1.el9_6.OL9]
- nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5.el9
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]
-
Tue Sep 09 2025 Chao YE <cye@redhat.com> [5.14.0-570.44.1.el9_6]
- ipv6: mcast: Delay put pmc->idev in mld_del_delrec() (CKI Backport Bot) [RHEL-111149] {CVE-2025-38550}
- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112780] {CVE-2025-38352}
- powerpc/pseries/iommu: create DDW for devices with DMA mask less than 64-bits (CKI Backport Bot) [RHEL-113173]
-
Sat Sep 06 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.43.1.el9_6]
- eth: bnxt: fix missing ring index trim on error path (CKI Backport Bot) [RHEL-104561] {CVE-2025-37873}
- book3s64/radix : Align section vmemmap start address to PAGE_SIZE (Mamatha Inamdar) [RHEL-109492]
- book3s64/radix: Fix compile errors when CONFIG_ARCH_WANT_OPTIMIZE_DAX_VMEMMAP=n (Mamatha Inamdar) [RHEL-109492]
- net: introduce per netns packet chains (Paolo Abeni) [RHEL-89050]
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108274]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108274]
- enic: get max rq & wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106604]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106604]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106604]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106604]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106604]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106604]
- enic: enic rq code reorg (John Meneghini) [RHEL-106604]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106604]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106604]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106604]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106604]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106604]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106604]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106604]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106604]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106604]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106604]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106604]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106604]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106604]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106604]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106604]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106604]
- enic: Report some per queue statistics in ethtool (John Meneghini) [RHEL-106604]
- enic: Report per queue statistics in netdev qstats (John Meneghini) [RHEL-106604]
- enic: Collect per queue statistics (John Meneghini) [RHEL-106604]
- enic: Use macro instead of static const variables for array sizes (John Meneghini) [RHEL-106604]
- enic: add ethtool get_channel support (John Meneghini) [RHEL-106604]
- enic: Validate length of nl attributes in enic_set_vf_port (John Meneghini) [RHEL-106604]
- enic: Replace hardcoded values for vnic descriptor by defines (John Meneghini) [RHEL-106604]
- enic: Avoid false positive under FORTIFY_SOURCE (John Meneghini) [RHEL-106604]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-106420]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-106420]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-106420]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-106420]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-106420]
- scsi: fnic: Remove unnecessary NUL-terminations (John Meneghini) [RHEL-106419]
- scsi: fnic: Remove redundant flush_workqueue() calls (John Meneghini) [RHEL-106419]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-106419]
- scsi: fnic: Replace fnic->lock_flags with local flags (John Meneghini) [RHEL-106419]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-106419]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-106419]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-106419]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-106419]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-106419]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-106419]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-106419]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-106419]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-106419]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-106419]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-106419]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-106419]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-106419]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-106419]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-106419]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-106419]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-106419]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-106419]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-106419]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-106419]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-106419]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-106419]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-106419]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-106419]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-106419]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-106419]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-106419]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-106419]
- scsi: fnic: Use vcalloc() instead of vmalloc() and memset(0) (John Meneghini) [RHEL-106419]
- scsi: fnic: Move flush_work initialization out of if block (John Meneghini) [RHEL-106419]
- scsi: fnic: Move fnic_fnic_flush_tx() to a work queue (John Meneghini) [RHEL-106419]
- scsi: fnic: Convert snprintf() to sysfs_emit() (John Meneghini) [RHEL-106419]
- scsi: fnic: Clean up some inconsistent indenting (John Meneghini) [RHEL-106419]
- scsi: fnic: unlock on error path in fnic_queuecommand() (John Meneghini) [RHEL-106419]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-106419]
- scsi: fnic: Improve logs and add support for multiqueue (MQ) (John Meneghini) [RHEL-106419]
- scsi: fnic: Add support for multiqueue (MQ) in fnic driver (John Meneghini) [RHEL-106419]
- scsi: fnic: Add support for multiqueue (MQ) in fnic_main.c (John Meneghini) [RHEL-106419]
- scsi: fnic: Remove usage of host_lock (John Meneghini) [RHEL-106419]
- scsi: fnic: Define stats to track multiqueue (MQ) IOs (John Meneghini) [RHEL-106419]
- scsi: fnic: Modify ISRs to support multiqueue (MQ) (John Meneghini) [RHEL-106419]
- scsi: fnic: Refactor and redefine fnic.h for multiqueue (John Meneghini) [RHEL-106419]
- scsi: fnic: Get copy workqueue count and interrupt mode from config (John Meneghini) [RHEL-106419]
- scsi: fnic: Rename wq_copy to hw_copy_wq (John Meneghini) [RHEL-106419]
- scsi: fnic: Add and improve log messages (John Meneghini) [RHEL-106419]
- scsi: fnic: Add and use fnic number (John Meneghini) [RHEL-106419]
- scsi: fnic: Modify definitions to sync with VIC firmware (John Meneghini) [RHEL-106419]
- scsi: fnic: Return error if vmalloc() failed (John Meneghini) [RHEL-106419]
- scsi: fnic: Clean up some inconsistent indenting (John Meneghini) [RHEL-106419]
- scsi: fnic: Fix sg_reset success path (John Meneghini) [RHEL-106419]
- scsi: fnic: Remove unused functions fnic_scsi_host_start/end_tag() (John Meneghini) [RHEL-106419]
- scsi: fnic: Replace sgreset tag with max_tag_id (John Meneghini) [RHEL-106419]
- scsi: fnic: Replace return codes in fnic_clean_pending_aborts() (John Meneghini) [RHEL-106419]
- scsi: fnic: Use vmalloc_array() and vcalloc() (John Meneghini) [RHEL-106419]
- scsi: fnic: Use vzalloc() (John Meneghini) [RHEL-106419]
- scsi: fnic: Refactor code in fnic probe to initialize SCSI layer (John Meneghini) [RHEL-106419]
- scsi: fnic: Replace DMA mask of 64 bits with 47 bits (John Meneghini) [RHEL-106419]
- scsi: fnic: Remove unneeded flush_workqueue() (John Meneghini) [RHEL-106419]
- scsi: fnic: Remove redundant NULL check (John Meneghini) [RHEL-106419]
- scsi: fnic: Stop using the SCSI pointer (John Meneghini) [RHEL-106419]
- scsi: fnic: Fix a tracing statement (John Meneghini) [RHEL-106419]
- scsi: fnic: Call scsi_done() directly (John Meneghini) [RHEL-106419]
- Revert "driver core: Fix uevent_show() vs driver detach race" (Mark Langsdorf) [RHEL-85410]
-
Sat Aug 30 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.42.1.el9_6]
- powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-103015]
- drm/framebuffer: Acquire internal references on GEM handles (José Expósito) [RHEL-106699] {CVE-2025-38449}
- drm/gem: Acquire references on GEM handles for framebuffers (José Expósito) [RHEL-106699] {CVE-2025-38449}
- drm/vkms: Fix use after free and double free on init error (CKI KWF BOT) [RHEL-99420] {CVE-2025-22097}
- scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105933] {CVE-2025-38332}
-
Thu Aug 28 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.41.1.el9_6]
- powerpc/pseries/iommu: Fix kmemleak in TCE table userspace view (Mamatha Inamdar) [RHEL-107002]
- net: ibmveth: make veth_pool_store stop hanging (Mamatha Inamdar) [RHEL-109494]
- ibmveth: Always stop tx queues during close (Mamatha Inamdar) [RHEL-109494]
- smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-109723]
- smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-109723]
- smb: convert to ctime accessor functions (Paulo Alcantara) [RHEL-109723]
- crypto: tegra - Fix IV usage for AES ECB (Nirmala Dalvi) [RHEL-107286]
- crypto: tegra - Fix format specifier in tegra_sha_prep_cmd() (Nirmala Dalvi) [RHEL-107286]
- crypto: tegra - Use HMAC fallback when keyslots are full (Nirmala Dalvi) [RHEL-107286]
- crypto: tegra - Reserve keyslots to allocate dynamically (Nirmala Dalvi) [RHEL-107286]
- crypto: tegra - Set IV to NULL explicitly for AES ECB (Nirmala Dalvi) [RHEL-107286]
- crypto: tegra - Fix CMAC intermediate result handling (Nirmala Dalvi) [RHEL-107286]
- crypto: tegra - Fix HASH intermediate result handling (Nirmala Dalvi) [RHEL-107286]
- crypto: tegra - Transfer HASH init function to crypto engine (Nirmala Dalvi) [RHEL-107286]
- crypto: tegra - check return value for hash do_one_req (Nirmala Dalvi) [RHEL-107286]
- crypto: tegra - finalize crypto req on error (Nirmala Dalvi) [RHEL-107286]
- crypto: tegra - Do not use fixed size buffers (Nirmala Dalvi) [RHEL-107286]
- crypto: tegra - Use separate buffer for setkey (Nirmala Dalvi) [RHEL-107286]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Nirmala Dalvi) [RHEL-107286]
- crypto: tegra - remove redundant error check on ret (Nirmala Dalvi) [RHEL-107286]
- crypto: tegra - do not transfer req when tegra init fails (Nirmala Dalvi) [RHEL-107286]
- crypto: engine - Remove prepare/unprepare request (Nirmala Dalvi) [RHEL-107286]
- udmabuf: fix a buf size overflow issue during udmabuf creation (CKI Backport Bot) [RHEL-99746] {CVE-2025-37803}
-
Wed Aug 27 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.40.1.el9_6]
- idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106054] {CVE-2025-38392}
-
Sat Aug 23 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.39.1.el9_6]
- xfrm: interface: fix use-after-free after changing collect_md xfrm interface (CKI Backport Bot) [RHEL-109529] {CVE-2025-38500}
- Merge: net: mana: Fix race of mana_hwc_post_rx_wqe and new hwc response [rhel-9.6.z] (Maxim Levitsky) [RHEL-58904]
- s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-102036]
- s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-102036]
- s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-102036]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-102036]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Thomas Huth) [RHEL-102036] {CVE-2025-37946}
- s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-102036] {CVE-2025-37974}
- s390/pci: Fix potential double remove of hotplug slot (Thomas Huth) [RHEL-102036] {CVE-2024-56699}
- s390/pci: remove hotplug slot when releasing the device (Thomas Huth) [RHEL-102036]
- s390/pci: introduce lock to synchronize state of zpci_dev's (Thomas Huth) [RHEL-102036]
- s390/pci: rename lock member in struct zpci_dev (Thomas Huth) [RHEL-102036]
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107895]
- i40e: report VF tx_dropped with tx_errors instead of tx_discards (Dennis Chen) [RHEL-105137]
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-94815]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-85387]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-85387]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-85387]
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106651] {CVE-2025-38464}
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106415] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106415]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106415]
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103555]
-
Wed Aug 20 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.38.1.el9_6]
- net/sched: ets: use old 'nbands' while purging unused classes (CKI Backport Bot) [RHEL-107537] {CVE-2025-38350}
- net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93387] {CVE-2025-38350}
- net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107537] {CVE-2025-38107}
- sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93387] {CVE-2025-37953}
- codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93387] {CVE-2025-37798}
- sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93387] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93387] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93387] {CVE-2025-37932}
- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107630] {CVE-2025-37823}
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (CKI Backport Bot) [RHEL-106046] {CVE-2025-38200}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106003] {CVE-2025-38461}
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104273] {CVE-2025-38211}
-
Sat Aug 16 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.37.1.el9_6]
- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108152] {CVE-2025-38417}
- ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-105151]
- ethtool: Fix set RXNFC command with symmetric RSS hash (Mohammad Heib) [RHEL-103526]
- drm/i915: Give i915 and xe each their own display tracepoints (Jocelyn Falempe) [RHEL-94419]
-
Wed Aug 13 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.36.1.el9_6]
- udp: Fix memory accounting leak. (Xin Long) [RHEL-104091] {CVE-2025-22058}
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104719] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104719]