# changelog

author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-736.el9]
changelog:
  - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-222801]
  - i2c: core: fix adapter deregistration race (David Arcari) [RHEL-222902] {CVE-2026-64279}
  - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183626] {CVE-2025-10263}
  - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183626] {CVE-2025-10263}
  - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183626] {CVE-2025-10263}
  - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183626] {CVE-2025-10263}
  - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183626] {CVE-2025-10263}
  - arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183626] {CVE-2025-10263}
  - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183626] {CVE-2025-10263}
  - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183626] {CVE-2025-10263}
  - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183626] {CVE-2025-10263}
  - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183626] {CVE-2025-10263}
  - Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183626] {CVE-2025-10263}
  - platform/x86/amd/hsmp: Clamp ioctl/send_message indices (Spectre v1) (David Arcari) [RHEL-217011]
  - pinctrl-amd: Don't clear S4 wake bits at probe (David Arcari) [RHEL-211144]
  - fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (David Arcari) [RHEL-216442]
  - fs/resctrl: Fix use-after-free during unmount (David Arcari) [RHEL-216442]
  - fs/resctrl: Free mon_data structures on rdt_get_tree() failure (David Arcari) [RHEL-216442]
  - x86,fs/resctrl: Prevent out-of-bounds access while offlining CPU when SNC enabled (David Arcari) [RHEL-216442]
  - kernfs: fix suspicious RCU usage in kernfs_put() (David Arcari) [RHEL-216442]
  - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213339] {CVE-2026-63807}
  - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213339]
  - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213339]
  - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213339]
  - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-213339]
  - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211279] {CVE-2025-40026}
  - perf/arm_cspmu: nvidia: Add pmevfiltr2 support (Charles Mirabile) [RHEL-121676]
  - perf/arm_cspmu: nvidia: Add revision id matching (Charles Mirabile) [RHEL-121676]
  - perf/arm_cspmu: Add pmpidr support (Charles Mirabile) [RHEL-121676]
  - perf/arm_cspmu: Add callback to reset filter config (Charles Mirabile) [RHEL-121676]
  - perf/arm_cspmu: Add PMEVFILT2R support (Charles Mirabile) [RHEL-121676]
  - perf/arm_cspmu: Fix missing io.h include (Charles Mirabile) [RHEL-121676]
  - perf/arm_cspmu: Generalise event filtering (Charles Mirabile) [RHEL-121676]
  - perf/arm_cspmu: Move register definitons to header (Charles Mirabile) [RHEL-121676]
  - fixup! Merge: s390/entry: Scrub r12 register on kernel entry (Jan Polensky) [RHEL-191803]
  - redhat/configs: Enable Epson RX8111 RTC driver (Nirmala Dalvi) [RHEL-184760]
  - rtc: rx8111: Adapt upstream driver for kernel 5.14 (Nirmala Dalvi) [RHEL-184760]
  - rtc: rx8111: handle VLOW flag (Nirmala Dalvi) [RHEL-184760]
  - rtc: rx8111: demote warnings to debug level (Nirmala Dalvi) [RHEL-184760]
  - rtc: Add driver for Epson RX8111 (Nirmala Dalvi) [RHEL-184760]
  - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188213] {CVE-2026-52923}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-737.el9]
changelog:
  - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-222675]
  - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224537]
  - thermal: intel: Fix dangling resources on thermal_throttle_online() failure (David Arcari) [RHEL-212721]
  - thermal: intel: int340x: Fix potential shift overflow in ptc_mmio_write() (David Arcari) [RHEL-212721]
  - bnxt_en: Fix NULL pointer dereference (CKI Backport Bot) [RHEL-185084]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-738.el9]
changelog:
  - scsi: smartpqi: Update version to 2.1.42-011 (Don Brace) [RHEL-224339]
  - scsi: smartpqi: Add new PCI device-ids (Don Brace) [RHEL-224339]
  - scsi: smartpqi: Add support for CCISS_BIG_PASSTHRU ioctl (Don Brace) [RHEL-224339]
  - scsi: smartpqi: Fix AIO retry marker cleared by SCSI core between dispatches. (Don Brace) [RHEL-224339]
  - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231655] {CVE-2026-63886}
  - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231655] {CVE-2026-63886}
  - platform/x86/intel/tpmi/plr: Prevent fault during unbind (Dennis Chen) [RHEL-212707]
  - platform/x86: intel: Add notifiers support (Dennis Chen) [RHEL-212707]
  - x86/fpu: Ensure XFD state on signal delivery (Dennis Chen) [RHEL-212652]
  - platform/x86/intel/vsec: Fix enable_cnt imbalance on PCIe error recovery (Dennis Chen) [RHEL-212719]
  - ALSA: hda/realtek: Add quirk for TongFang X6SP45xU (Jaroslav Kysela) [RHEL-193254]
  - ASoC: amd: ps: disable MSI on resume in ACP PCI driver (Jaroslav Kysela) [RHEL-193254]
  - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (Jaroslav Kysela) [RHEL-193254]
  - ALSA: hda/tas2781: Cancel async firmware request at unbind (Jaroslav Kysela) [RHEL-193254]
  - firmware_loader: Add cancel helper for async requests (Jaroslav Kysela) [RHEL-193254]
  - ALSA: scarlett2: Update offsets for 2i2 Gen 4 firmware 2417 (Jaroslav Kysela) [RHEL-193254]
  - ALSA: scarlett2: Allow selecting config_set by firmware version (Jaroslav Kysela) [RHEL-193254]
  - ASoC: qcom: q6apm: fix NULL pointer dereference in graph_callback (Jaroslav Kysela) [RHEL-193254]
  - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (Jaroslav Kysela) [RHEL-193254]
  - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (Jaroslav Kysela) [RHEL-193254]
  - ASoC: SOF: topology: fix memory leak in snd_sof_load_topology (Jaroslav Kysela) [RHEL-193254]
  - ASoC: SOF: topology: validate vendor array size before parsing (Jaroslav Kysela) [RHEL-193254]
  - ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (Jaroslav Kysela) [RHEL-193254]
  - ASoC: SOF: ipc3-control: Use overflow checks in control_update size calc (Jaroslav Kysela) [RHEL-193254]
  - ASoC: SOF: ipc4-control: Validate notification payload size (Jaroslav Kysela) [RHEL-193254]
  - ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put (Jaroslav Kysela) [RHEL-193254]
  - ASoC: codecs: lpass-va-macro: Fix LPASS Codec Version for SC7280 (Jaroslav Kysela) [RHEL-193254]
  - ALSA: FCP: Fix NULL pointer dereference in interface lookup (Jaroslav Kysela) [RHEL-193254]
  - ASoC: fsl_asrc_dma: fix eDMA maxburst misalignment with channel count (Jaroslav Kysela) [RHEL-193254]
  - ASoC: SDCA: Validate written enum value in ge_put_enum_double() (Jaroslav Kysela) [RHEL-193254]
  - ALSA: usb-audio: Kill MIDI 2.0 URBs before freeing endpoints (Jaroslav Kysela) [RHEL-193254]
  - ALSA: usb-audio: qcom: clear opened when stream enable fails (Jaroslav Kysela) [RHEL-193254]
  - ALSA: usb-audio: qcom: reject stream disable with no active interface (Jaroslav Kysela) [RHEL-193254]
  - ASoC: tlv320aic3x: restrict CLKDIV bypass Q values in dual-rate mode (Jaroslav Kysela) [RHEL-193254]
  - ALSA: usb-audio: qcom: Free sideband sg_table objects (Jaroslav Kysela) [RHEL-193254]
  - soundwire: intel_ace2x: release bpt_stream when close it (Jaroslav Kysela) [RHEL-193254]
  - soundwire: fix bug in sdw_add_element_group_count found by syzkaller (Jaroslav Kysela) [RHEL-193254]
  - soundwire: don't program SDW_SCP_BUSCLOCK_SCALE on a unattached Peripheral (Jaroslav Kysela) [RHEL-193254]
  - mfd: cs42l43: Sanity check firmware size (Jaroslav Kysela) [RHEL-193254]
  - ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait() (Jaroslav Kysela) [RHEL-193254]
  - ALSA: seq: avoid stale FIFO cells during resize (Jaroslav Kysela) [RHEL-193254]
  - ALSA: seq: oss: Serialize readq reset state with q->lock (Jaroslav Kysela) [RHEL-193254]
  - ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset GPIO (Jaroslav Kysela) [RHEL-193254]
  - ALSA: seq: Fix kernel heap address leak in bounce_error_event() (Jaroslav Kysela) [RHEL-193254]
  - ALSA: usb-audio: qcom: Guard sideband endpoint removal (Jaroslav Kysela) [RHEL-193254]
  - ASoC: topology: Check PCM and DAI name strings before use (Jaroslav Kysela) [RHEL-193254]
  - ASoC: tegra: tegra210_ahub: Validate written enum value (Jaroslav Kysela) [RHEL-193254]
  - ASoC: fsl: fsl_audmix: Validate written enum values (Jaroslav Kysela) [RHEL-193254]
  - ASoC: meson: aiu: Validate written enum values (Jaroslav Kysela) [RHEL-193254]
  - ASoC: codecs: hdac_hdmi: Validate written enum value (Jaroslav Kysela) [RHEL-193254]
  - ASoC: SOF: Intel: hda-sdw-bpt: select SND_SOF_SOF_HDA_SDW_BPT properly (Jaroslav Kysela) [RHEL-193254]
  - ASoC: SOF: Intel: select SND_SOC_SDW_UTILS=y from SND_SOC_SOF_HDA_GENERIC=y (Jaroslav Kysela) [RHEL-193254]
  - ASoC: cs35l56: Fix wrong error test on simple_write_to_buffer() (Jaroslav Kysela) [RHEL-193254]
  - ASoC: cs35l56: Fix possible uninitialized value in cs35l56_spi_system_reset() (Jaroslav Kysela) [RHEL-193254]
  - ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend fails (Jaroslav Kysela) [RHEL-193254]
  - ASoC: codecs: aw88261: fix incorrect masks for boost regs (Jaroslav Kysela) [RHEL-193254]
  - ASoC: sma1307: Fix uevent string leaks in fault worker (Jaroslav Kysela) [RHEL-193254]
  - ALSA: aloop: Drop superfluous break (Jaroslav Kysela) [RHEL-193254]
  - ASoC: amd: acp-sdw-sof: Bound DAI link iteration (Jaroslav Kysela) [RHEL-193254]
  - ASoC: amd: acp-sdw-legacy: Bound DAI link iteration (Jaroslav Kysela) [RHEL-193254]
  - ALSA: seq: Clear variable event pointer on read (Jaroslav Kysela) [RHEL-193254]
  - ALSA: seq: Fix partial userptr event expansion (Jaroslav Kysela) [RHEL-193254]
  - ALSA: hda: fix Kconfig dependency of HD Audio PCI (Jaroslav Kysela) [RHEL-193254]
  - ALSA: usb-audio: qcom: Initialize offload control return value (Jaroslav Kysela) [RHEL-193254]
  - ALSA: seq: midi: Serialize output teardown with event_input (Jaroslav Kysela) [RHEL-193254]
  - ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data (Jaroslav Kysela) [RHEL-193254]
  - ALSA: xen-front: Connect event channel after stream prepare (Jaroslav Kysela) [RHEL-193254]
  - ALSA: xen-front: Reset event channel state on stream clear (Jaroslav Kysela) [RHEL-193254]
  - ASoC: dapm: Fix widget lookup with prefixed names across DAPM contexts (Jaroslav Kysela) [RHEL-193254]
  - ALSA: hda/realtek: Fix speakers on Legion Pro 7 16ARX8H with codec SSID 17aa:38a7 (Jaroslav Kysela) [RHEL-193254]
  - ALSA: hda: Fix cached processing coefficient verbs (Jaroslav Kysela) [RHEL-193254]
  - ALSA: hda: conexant: Remove mic bias threshold override (Jaroslav Kysela) [RHEL-193254]
  - ALSA: hda/realtek: Add quirk for TongFang X6xx45xU (Jaroslav Kysela) [RHEL-193254]
  - ALSA: doc: usb-audio: Add doc for QUIRK_FLAG_IFB_SILENCE_ON_EMPTY (Jaroslav Kysela) [RHEL-193254]
  - ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after successful writes (Jaroslav Kysela) [RHEL-193254]
  - ALSA: usb-audio: Update Babyface Pro control caches only after successful writes (Jaroslav Kysela) [RHEL-193254]
  - ALSA: usb-audio: Roll back quirk control caches on write errors (Jaroslav Kysela) [RHEL-193254]
  - ALSA: usb-audio: Propagate US-16x08 write errors in route/mix EQ-switch put callbacks (Jaroslav Kysela) [RHEL-193254]
  - ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put() (Jaroslav Kysela) [RHEL-193254]
  - ALSA: usb-audio: avoid kobject path lookup in DualSense match (Jaroslav Kysela) [RHEL-193254] {CVE-2026-64478}
  - ALSA: usb-audio: add IFB_SILENCE_ON_EMPTY quirk for Behringer Flow 8 (Jaroslav Kysela) [RHEL-193254]
  - KVM: s390: Fall back to short-term pinning in MAP ioctl (Christoph Schlameuss) [RHEL-136457]
  - KVM: s390: Introducing kvm_arch_set_irq_inatomic fast inject (Christoph Schlameuss) [RHEL-136457]
  - KVM: s390: Enable adapter_indicators_set to use mapped pages (Christoph Schlameuss) [RHEL-136457]
  - KVM: s390: Add map/unmap ioctl and clean mappings post-guest (Christoph Schlameuss) [RHEL-136457]
  - KVM: s390: get rid of gmap_translate() (Christoph Schlameuss) [RHEL-136457]
  - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-150728]
  - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-150728]
  - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-150728]
  - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-150728]
  - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-150728]
  - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-150728] {CVE-2026-43084}
  - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-150728]
  - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-150728]
  - ipv6: fix a BUG in rt6_get_pcpu_route() under PREEMPT_RT (Luis Claudio R. Goncalves) [RHEL-186591]
  - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188519] {CVE-2026-53000}
  - kernel.spec.template: add tcp_ao kselftests (Davide Caratti) [RHEL-142637]
  - Kconfig: enable CONFIG_TCP_AO (Davide Caratti) [RHEL-142637]
  - tcp: Decrement tcp_md5_needed static branch (Davide Caratti) [RHEL-142637]
  - net/tcp-ao: fix use-after-free of key in del_async path (Davide Caratti) [RHEL-142637]
  - sockptr: fix usize check in copy_struct_from_sockptr() for user pointers (Davide Caratti) [RHEL-142637]
  - tcp: defer md5sig_info kfree past RCU grace period in tcp_connect (Davide Caratti) [RHEL-142637]
  - tcp: restore RCU grace period in tcp_ao_destroy_sock (Davide Caratti) [RHEL-142637]
  - selftests/net: Synchronize client/server before counters checks (Davide Caratti) [RHEL-142637]
  - selftests/net: Fix various spelling mistakes in TCP-AO tests (Davide Caratti) [RHEL-142637]
  - tcp: Fix out-of-bounds access for twsk in tcp_ao_established_key(). (Davide Caratti) [RHEL-142637]
  - selftests/tcp_ao: Printing fixes to confirm with format-security (Davide Caratti) [RHEL-142637]
  - selftests/tcp_ao: Fix fscanf() call for format-security (Davide Caratti) [RHEL-142637]
  - selftests/tcp_ao: Zero-init tcp_ao_info_opt (Davide Caratti) [RHEL-142637]
  - selftests/net: Amend per-netns counter checks (Davide Caratti) [RHEL-142637]
  - selftests/tcp_ao: Make RST tests less flaky (Davide Caratti) [RHEL-142637]
  - selftests/net: Repair RST passive reset selftest (Davide Caratti) [RHEL-142637]
  - tcp: Don't flag tcp_sk(sk)->rx_opt.saw_unknown for TCP AO. (Davide Caratti) [RHEL-142637]
  - tcp: Don't access uninit tcp_rsk(req)->ao_keyid in tcp_create_openreq_child(). (Davide Caratti) [RHEL-142637]
  - net/tcp: Fix socket memory leak in TCP-AO failure handling for IPv6 (Davide Caratti) [RHEL-142637] {CVE-2025-39852}
  - selftests/net: Rectify key counters checks (Davide Caratti) [RHEL-142637]
  - selftests/net: Argument value mismatch when calling verify_counters() (Davide Caratti) [RHEL-142637]
  - selftests: tcp_ao: set the timeout to 2 minutes (Davide Caratti) [RHEL-142637]
  - selftests: tcp_ao: add a config file (Davide Caratti) [RHEL-142637]
  - selftests/net/tcp-ao: Use LDLIBS instead of LDFLAGS (Davide Caratti) [RHEL-142637]
  - net/tcp_sigpool: Use kref_get_unless_zero() (Davide Caratti) [RHEL-142637]
  - selftest/tcp-ao: Rectify out-of-tree build (Davide Caratti) [RHEL-142637]
  - selftests/net: Add TCP-AO key-management test (Davide Caratti) [RHEL-142637]
  - selftests/net: Add TCP-AO selfconnect/simultaneous connect test (Davide Caratti) [RHEL-142637]
  - selftests/net: Add TCP-AO RST test (Davide Caratti) [RHEL-142637]
  - selftests/net: Add SEQ number extension test (Davide Caratti) [RHEL-142637]
  - selftests/net: Add TCP_REPAIR TCP-AO tests (Davide Caratti) [RHEL-142637]
  - selftests/net: Add test/benchmark for removing MKTs (Davide Caratti) [RHEL-142637]
  - selftests/net: Add TCP-AO + TCP-MD5 + no sign listen socket tests (Davide Caratti) [RHEL-142637]
  - selftests/net: Add test for TCP-AO add setsockopt() command (Davide Caratti) [RHEL-142637]
  - selftests/net: Add a test for TCP-AO keys matching (Davide Caratti) [RHEL-142637]
  - selftests/net: Add TCP-AO ICMPs accept test (Davide Caratti) [RHEL-142637]
  - selftests/net: Verify that TCP-AO complies with ignoring ICMPs (Davide Caratti) [RHEL-142637]
  - selftests/net: Add TCP-AO library (Davide Caratti) [RHEL-142637]
  - net/tcp-ao: Fix MAC comparison to be constant-time (Davide Caratti) [RHEL-142637] {CVE-2026-43384}
  - net/tcp: Fix a NULL pointer dereference when using TCP-AO with TCP_REPAIR (Davide Caratti) [RHEL-142637] {CVE-2025-39950}
  - tcp: Free TCP-AO/TCP-MD5 info/keys without RCU (Davide Caratti) [RHEL-142637]
  - tcp: Destroy TCP-AO, TCP-MD5 keys in .sk_destruct() (Davide Caratti) [RHEL-142637]
  - net/tcp: Add missing lockdep annotations for TCP-AO hlist traversals (Davide Caratti) [RHEL-142637]
  - net/tcp: Disable TCP-AO static key after RCU grace period (Davide Caratti) [RHEL-142637] {CVE-2024-43887}
  - net/tcp_ao: Don't leak ao_info on error-path (Davide Caratti) [RHEL-142637] {CVE-2024-40985}
  - Documentation/tcp-ao: Add a few lines on tracepoints (Davide Caratti) [RHEL-142637]
  - net/tcp: Remove tcp_hash_fail() (Davide Caratti) [RHEL-142637]
  - net/tcp: Add tcp-md5 and tcp-ao tracepoints (Davide Caratti) [RHEL-142637]
  - net/tcp: Move tcp_inbound_hash() from headers (Davide Caratti) [RHEL-142637]
  - net/tcp: Add a helper tcp_ao_hdr_maclen() (Davide Caratti) [RHEL-142637]
  - net/tcp: Use static_branch_tcp_{md5,ao} to drop ifdefs (Davide Caratti) [RHEL-142637]
  - net/tcp: Only produce AO/MD5 logs if there are any keys (Davide Caratti) [RHEL-142637]
  - tcp: Move TCP-AO bits from cookie_v[46]_check() to tcp_ao_syncookie(). (Davide Caratti) [RHEL-142637]
  - tcp: Cache sock_net(sk) in cookie_v[46]_check(). (Davide Caratti) [RHEL-142637]
  - net/tcp: Don't consider TCP_CLOSE in TCP_AO_ESTABLISHED (Davide Caratti) [RHEL-142637]
  - tcp: Fix Use-After-Free in tcp_ao_connect_init (Davide Caratti) [RHEL-142637] {CVE-2024-27394}
  - net: tcp: remove call to obsolete crypto_ahash_alignmask() (Davide Caratti) [RHEL-142637]
  - net/tcp: Don't store TCP-AO maclen on reqsk (Davide Caratti) [RHEL-142637]
  - net/tcp: Don't add key with non-matching VRF on connected sockets (Davide Caratti) [RHEL-142637]
  - net/tcp: Limit TCP_AO_REPAIR to non-listen sockets (Davide Caratti) [RHEL-142637]
  - net/tcp: Consistently align TCP-AO option in the header (Davide Caratti) [RHEL-142637]
  - tcp: Fix SYN option room calculation for TCP-AO. (Davide Caratti) [RHEL-142637]
  - Documentation/tcp: Fix an obvious typo (Davide Caratti) [RHEL-142637]
  - tcp: Fix -Wc23-extensions in tcp_options_write() (Davide Caratti) [RHEL-142637]
  - net/tcp_sigpool: Fix some off by one bugs (Davide Caratti) [RHEL-142637]
  - net/tcp: fix possible out-of-bounds reads in tcp_hash_fail() (Davide Caratti) [RHEL-142637]
  - Documentation/tcp: Add TCP-AO documentation (Davide Caratti) [RHEL-142637]
  - net/tcp: Add TCP_AO_REPAIR (Davide Caratti) [RHEL-142637]
  - net/tcp: Wire up l3index to TCP-AO (Davide Caratti) [RHEL-142637]
  - net/tcp: Add static_key for TCP-AO (Davide Caratti) [RHEL-142637]
  - net/tcp: Allow asynchronous delete for TCP-AO keys (MKTs) (Davide Caratti) [RHEL-142637]
  - net/tcp: Add TCP-AO getsockopt()s (Davide Caratti) [RHEL-142637]
  - net/tcp: Add option for TCP-AO to (not) hash header (Davide Caratti) [RHEL-142637]
  - net/tcp: Ignore specific ICMPs for TCP-AO connections (Davide Caratti) [RHEL-142637]
  - net/tcp: Add tcp_hash_fail() ratelimited logs (Davide Caratti) [RHEL-142637]
  - net/tcp: Add TCP-AO SNE support (Davide Caratti) [RHEL-142637]
  - net/tcp: Add TCP-AO segments counters (Davide Caratti) [RHEL-142637]
  - net/tcp: Verify inbound TCP-AO signed segments (Davide Caratti) [RHEL-142637]
  - net/tcp: Sign SYN-ACK segments with TCP-AO (Davide Caratti) [RHEL-142637]
  - net/tcp: Wire TCP-AO to request sockets (Davide Caratti) [RHEL-142637]
  - net/tcp: Add TCP-AO sign to twsk (Davide Caratti) [RHEL-142637]
  - net/tcp: Add AO sign to RST packets (Davide Caratti) [RHEL-142637]
  - net/tcp: Add tcp_parse_auth_options() (Davide Caratti) [RHEL-142637]
  - net/tcp: Add TCP-AO sign to outgoing packets (Davide Caratti) [RHEL-142637]
  - net/tcp: Calculate TCP-AO traffic keys (Davide Caratti) [RHEL-142637]
  - net/tcp: Prevent TCP-MD5 with TCP-AO being set (Davide Caratti) [RHEL-142637]
  - net/tcp: Introduce TCP_AO setsockopt()s (Davide Caratti) [RHEL-142637]
  - net/tcp: Add TCP-AO config and structures (Davide Caratti) [RHEL-142637]
  - net/tcp: Prepare tcp_md5sig_pool for TCP-AO (Davide Caratti) [RHEL-142637]
  - tcp: Update stale comment for MD5 in tcp_parse_options(). (Davide Caratti) [RHEL-142637]
  - tcp: Disable header prediction for MD5 flow. (Davide Caratti) [RHEL-142637]
  - tcp: use 2-arg optimal variant of kfree_rcu() (Davide Caratti) [RHEL-142637]
  - net/tcp: Separate initialization of twsk (Davide Caratti) [RHEL-142637]
  - net/tcp: Do cleanup on tcp_md5_key_copy() failure (Davide Caratti) [RHEL-142637]
  - net/tcp: Disable TCP-MD5 static key on tcp_md5sig_info destruction (Davide Caratti) [RHEL-142637]
  - net/tcp: Separate tcp_md5sig_info allocation into tcp_md5sig_info_add() (Davide Caratti) [RHEL-142637]
  - tcp: md5: Allow MD5SIG_FLAG_IFINDEX with ifindex=0 (Davide Caratti) [RHEL-142637]
  - tcp: annotate data-race around tcp_md5sig_pool_populated (Davide Caratti) [RHEL-142637]
  - crypto: cipher - On clone do crypto_mod_get() (Davide Caratti) [RHEL-142637]
  - crypto: api - Add __crypto_alloc_tfmgfp (Davide Caratti) [RHEL-142637]
  - crypto: cmac - Add support for cloning (Davide Caratti) [RHEL-142637]
  - crypto: cipher - Add crypto_clone_cipher (Davide Caratti) [RHEL-142637]
  - crypto: cmac - Use modern init_tfm/exit_tfm (Davide Caratti) [RHEL-142637]
  - crypto: shash - Allow cloning on algorithms with no init_tfm (Davide Caratti) [RHEL-142637]
  - crypto: cryptd - Add support for cloning hashes (Davide Caratti) [RHEL-142637]
  - crypto: cryptd - Convert hash to use modern init_tfm/exit_tfm (Davide Caratti) [RHEL-142637]
  - crypto: hmac - Add support for cloning (Davide Caratti) [RHEL-142637]
  - crypto: hash - Add crypto_clone_ahash/shash (Davide Caratti) [RHEL-142637]
  - crypto: api - Add crypto_clone_tfm (Davide Caratti) [RHEL-142637]
  - crypto: api - Add crypto_tfm_get (Davide Caratti) [RHEL-142637]
  - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (Petr Oros) [RHEL-155154]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-739.el9]
changelog:
  - mm/vmscan: fix hard LOCKUP in function isolate_lru_folios (Aristeu Rozanski) [RHEL-153668]
  - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227838] {CVE-2026-64560}
  - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227838] {CVE-2026-64370}
  - posix-timers: Expand timer_[re]arm() callbacks with a boolean return value (Waiman Long) [RHEL-227838]
  - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227838]
  - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227838]
  - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227838]
  - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227838]
  - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227838]
  - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227838]
  - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227838]
  - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227838]
  - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227838]
  - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227838]
  - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227838]
  - posix-cpu-timers: Implement the missing timer_wait_running callback (Waiman Long) [RHEL-227838]
  - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231355] {CVE-2026-64557}
  - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231355] {CVE-2026-64557}
  - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232556]
  - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232556]
  - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232556] {CVE-2026-52991}
  - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232106] {CVE-2026-64191}
  - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230091] {CVE-2026-64048}
  - iommu/intel: Fix out-of-bounds memset in dmar_latency_disable() (Eder Zulian) [RHEL-213932] {CVE-2026-68324}
  - iommu/amd: Bound the early ACPI HID map (Eder Zulian) [RHEL-213932] {CVE-2026-68325}
  - iommu/vt-d: Disallow SVA if page walk is not coherent (Eder Zulian) [RHEL-213932]
  - iommu/amd: Wait for completion instead of returning early in iommu_completion_wait() (Eder Zulian) [RHEL-213932] {CVE-2026-68329}
  - iommu/amd: serialize sequence allocation under concurrent TLB invalidations (Eder Zulian) [RHEL-213932] {CVE-2026-43220}
  - iommu/amd: move wait_on_sem() out of spinlock (Eder Zulian) [RHEL-213932] {CVE-2026-43253}
  - iommu/arm-smmu-v3-iommufd: Require exactly one Stream ID for a vDEVICE (Eder Zulian) [RHEL-213932]
  - iommufd/viommu: Publish a vDEVICE only after vdevice_init() succeeds (Eder Zulian) [RHEL-213932]
  - iommufd/viommu: Release the igroup lock on the vdevice_size error path (Eder Zulian) [RHEL-213932]
  - iommufd: Fix wrong hwpt passed to iommufd_auto_response_faults on replace (Eder Zulian) [RHEL-213932]
  - iommu/dma-iommu: Fix wrong scatterlist length assignment in P2PDMA path (Eder Zulian) [RHEL-213932]
  - iommu/iommufd: Fix IOPF group ownership UAF (Eder Zulian) [RHEL-213932]
  - iommu: Avoid copying the user array twice in the full-array copy helper (Eder Zulian) [RHEL-213932]
  - iommufd: Set upper bounds on cache invalidation entry_num and entry_len (Eder Zulian) [RHEL-213932] {CVE-2026-64289}
  - iommu/dma: Do not try to iommu_map a 0 length region in swiotlb (Eder Zulian) [RHEL-213932] {CVE-2026-53164}
  - iommufd: Avoid partial fault group delivery in iommufd_fault_fops_read() (Eder Zulian) [RHEL-213932]
  - iommufd: Break the loop on failure in iommufd_fault_fops_read() (Eder Zulian) [RHEL-213932] {CVE-2026-64290}
  - iommufd: Reject invalid read count in iommufd_fault_fops_read() (Eder Zulian) [RHEL-213932]
  - iommufd: Propagate allocation failure in iommufd_veventq_deliver_fetch() (Eder Zulian) [RHEL-213932]
  - iommufd: Reject invalid read count in iommufd_veventq_fops_read() (Eder Zulian) [RHEL-213932]
  - iommufd: Rewind header length in done if iommufd_veventq_fops_read() fails (Eder Zulian) [RHEL-213932]
  - iommu/vt-d: Fix RB-tree corruption in probe error path (Eder Zulian) [RHEL-213932]
  - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-213932]
  - iommu/vt-d: Avoid WARNING in sva unbind path (Eder Zulian) [RHEL-213932] {CVE-2026-64591}
  - dma-debug: fix physical address retrieval in debug_dma_sync_sg_for_device (Eder Zulian) [RHEL-213932]
  - dma-mapping: direct: fix missing mapping for THRU_HOST_BRIDGE segments (Eder Zulian) [RHEL-213932]
  - iommu/amd: Don't split flush for amd_iommu_domain_flush_all() (Eder Zulian) [RHEL-213932]
  - iommufd: Set veventq_depth upper bound (Eder Zulian) [RHEL-213932] {CVE-2026-64291}
  - iommufd: Fix data_len byte-count vs element-count mismatch (Eder Zulian) [RHEL-213932]
  - drm/tegra: Fix iommu_map_sgtable() return value check (Eder Zulian) [RHEL-213932]
  - gpu: host1x: Fix iommu_map_sgtable() return value check (Eder Zulian) [RHEL-213932]
  - iommu/amd: Fix premature break in init_iommu_one() (Eder Zulian) [RHEL-213932]
  - iommu/arm-smmu-qcom: Fix fastrpc compatible string in ACTLR client match table (Eder Zulian) [RHEL-213932]
  - iommu/vt-d: Disable DMAR for Intel Q35 IGFX (Eder Zulian) [RHEL-213932]
  - iommu/amd: Bounds-check devid in __rlookup_amd_iommu() (Eder Zulian) [RHEL-213932] {CVE-2026-53283}
  - iommu/amd: Fix a stale comment about which legacy mode is user visible (Eder Zulian) [RHEL-213932]
  - iommufd: Use sizeof(*hdr) instead of sizeof(hdr) in veventq read (Eder Zulian) [RHEL-213932] {CVE-2026-64293}
  - iommufd: Fix a race with concurrent allocation and unmap (Eder Zulian) [RHEL-213932]
  - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-213932] {CVE-2026-53053}
  - iommu/vt-d: Block PASID attachment to nested domain with dirty tracking (Eder Zulian) [RHEL-213932] {CVE-2026-53372}
  - iommufd: Fix return value of iommufd_fault_fops_write() (Eder Zulian) [RHEL-213932]
  - dma-mapping: add missing `inline` for `dma_free_attrs` (Eder Zulian) [RHEL-213932]
  - iommu/tegra241-cmdqv: Update uAPI to clarify HYP_OWN requirement (Eder Zulian) [RHEL-213932]
  - iommu/tegra241-cmdqv: Set supports_cmd op in tegra241_vcmdq_hw_init() (Eder Zulian) [RHEL-213932]
  - iommu/arm-smmu-v3: Add a missing dma_wmb() for hitless STE update (Eder Zulian) [RHEL-213932]
  - dma: swiotlb: add KMSAN annotations to swiotlb_bounce() (Eder Zulian) [RHEL-213932]
  - iommufd/selftest: Fix page leaks in mock_viommu_{init,destroy} (Eder Zulian) [RHEL-213932]
  - iommufd: vfio compatibility extension check for noiommu mode (Eder Zulian) [RHEL-213932]
  - iommu/arm-smmu-qcom: do not register driver in probe() (Eder Zulian) [RHEL-213932]
  - iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED (Eder Zulian) [RHEL-213932] {CVE-2025-71122}
  - iommufd/selftest: Make it clearer to gcc that the access is not out of bounds (Eder Zulian) [RHEL-213932]
  - dmaengine: tegra: Fix burst size calculation (Eder Zulian) [RHEL-213921]
  - dmaengine: Fix possible use after free (Eder Zulian) [RHEL-213921]
  - dmaengine: qcom: gpi: set DMA_PRIVATE capability (Eder Zulian) [RHEL-213921]
  - dmaengine: imx-sdma: Refine spba bus searching in probe (Eder Zulian) [RHEL-213921]
  - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178418] {CVE-2026-43501}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-740.el9]
changelog:
  - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226701] {CVE-2026-43493}
  - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228526] {CVE-2026-63952}
  - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228526]
  - perf/x86/intel/uncore: Fix uncore_die_to_cpu() for offline dies (Michael Petlan) [RHEL-115125]
  - perf/x86/intel/uncore: Implement global init callback for GNR uncore (Michael Petlan) [RHEL-115125]
  - perf/x86/intel/uncore: Move die_to_cpu() to uncore.c (Michael Petlan) [RHEL-115125]
  - perf/x86/intel/uncore: Guard against invalid box control address (Michael Petlan) [RHEL-115125]
  - perf/x86/intel/uncore: Fix discovery unit lookup for multi-die systems (Michael Petlan) [RHEL-115125]
  - perf/x86/intel: Fix OMR snoop information parsing issues (Michael Petlan) [RHEL-115121]
  - perf/x86/intel/uncore: Remove extra double quote mark (Michael Petlan) [RHEL-115125]
  - perf/x86/intel/uncore: Fix die ID init and look up bugs (Michael Petlan) [RHEL-115125] {CVE-2026-43344}
  - perf/x86/intel/uncore: Skip discovery table for offline dies (Michael Petlan) [RHEL-115125] {CVE-2026-43079}
  - perf/x86/intel/uncore: Fix iounmap() leak on global_init failure (Michael Petlan) [RHEL-115125]
  - perf/x86/intel: Enable auto counter reload for DMR (Michael Petlan) [RHEL-117336]
  - perf/x86/intel: Add support for rdpmc user disable feature (Michael Petlan) [RHEL-117336]
  - perf/x86: Print PMU counters bitmap in x86_pmu_show_pmu_cap() (Michael Petlan) [RHEL-117336]
  - perf/x86/intel: Add ICL_FIXED_0_ADAPTIVE bit into INTEL_FIXED_BITS_MASK (Michael Petlan) [RHEL-117336]
  - KVM: x86/pmu: Manipulate FIXED_CTR_CTRL MSR with macros (Michael Petlan) [RHEL-117336]
  - KVM: x86/pmu: Change ambiguous _mask suffix to _rsvd in kvm_pmu (Michael Petlan) [RHEL-117336]
  - perf/x86/intel: Change macro GLOBAL_CTRL_EN_PERF_METRICS to BIT_ULL(48) (Michael Petlan) [RHEL-117336]
  - perf/x86: Add PERF_CAP_PEBS_TIMING_INFO flag (Michael Petlan) [RHEL-117336]
  - perf/x86: Use macros to replace magic numbers in attr_rdpmc (Michael Petlan) [RHEL-117336]
  - perf/x86/intel: Add core PMU support for Novalake (Michael Petlan) [RHEL-117336]
  - perf/x86/intel: Add support for PEBS memory auxiliary info field in NVL (Michael Petlan) [RHEL-117336]
  - perf/x86/intel: Add core PMU support for DMR (Michael Petlan) [RHEL-115121]
  - perf/x86/intel: Add support for PEBS memory auxiliary info field in DMR (Michael Petlan) [RHEL-115121]
  - perf/uapi: Clean up <uapi/linux/perf_event.h> a bit (Michael Petlan) [RHEL-115121]
  - tools headers: Update the uapi/linux/perf_event.h copy with the kernel sources (Michael Petlan) [RHEL-115121]
  - perf: Extend per event callchain limit to branch stack (Michael Petlan) [RHEL-115121]
  - perf/x86/intel: Support the 4 new OMR MSRs introduced in DMR and NVL (Michael Petlan) [RHEL-115121]
  - perf/x86/intel: Add a check for dynamic constraints (Anubhav Shelat) [RHEL-45125]
  - perf/x86/intel: Disable PMI for self-reloaded ACR events (Anubhav Shelat) [RHEL-45125]
  - perf/x86/intel: Optimize PEBS extended config (Anubhav Shelat) [RHEL-45125]
  - perf/x86/intel: Always reprogram ACR events to prevent stale masks (Anubhav Shelat) [RHEL-45125]
  - perf/x86/intel: Improve validation and configuration of ACR masks (Anubhav Shelat) [RHEL-45125] {CVE-2026-53370}
  - perf/x86: Fix potential bad container_of in intel_pmu_hw_config (Anubhav Shelat) [RHEL-45125] {CVE-2026-31782}
  - perf/x86/intel: Fix IA32_PMC_x_CFG_B MSRs access error (Anubhav Shelat) [RHEL-45125] {CVE-2025-40122}
  - perf/x86/intel: Fix incorrect MSR index calculations in intel_pmu_config_acr() (Anubhav Shelat) [RHEL-45125]
  - perf/x86/intel: Use early_initcall() to hook bts_init() (Anubhav Shelat) [RHEL-45125]
  - perf/x86/intel: Fix and clean up intel_pmu_drain_arch_pebs() type use (Anubhav Shelat) [RHEL-45125]
  - perf/x86/intel: Add counter group support for arch-PEBS (Anubhav Shelat) [RHEL-45125]
  - perf/x86/intel: Setup PEBS data configuration and enable legacy groups (Anubhav Shelat) [RHEL-45125]
  - perf/x86/intel: Update dyn_constraint base on PEBS event precise level (Anubhav Shelat) [RHEL-45125]
  - perf/x86/intel: Allocate arch-PEBS buffer and initialize PEBS_BASE MSR (Anubhav Shelat) [RHEL-45125]
  - perf/x86/intel: Process arch-PEBS records or record fragments (Anubhav Shelat) [RHEL-45125]
  - perf/x86/intel/ds: Factor out PEBS group processing code to functions (Anubhav Shelat) [RHEL-45125]
  - perf/x86/intel: Allow to update user space GPRs from PEBS records (Anubhav Shelat) [RHEL-45125]
  - perf/core: Check sample_type in perf_sample_save_callchain (Anubhav Shelat) [RHEL-45125]
  - perf/x86/intel/ds: Remove redundant assignments to sample.period (Anubhav Shelat) [RHEL-45125]
  - perf/x86/intel/ds: Factor out PEBS record processing code to functions (Anubhav Shelat) [RHEL-45125]
  - perf/x86/intel: Initialize architectural PEBS (Anubhav Shelat) [RHEL-45125]
  - perf/x86/intel: Introduce pairs of PEBS static calls (Anubhav Shelat) [RHEL-45125]
  - perf/x86/intel: Parse CPUID archPerfmonExt leaves for non-hybrid CPUs (Anubhav Shelat) [RHEL-45125]
  - perf/x86/intel: Rename x86_pmu.pebs to x86_pmu.ds_pebs (Anubhav Shelat) [RHEL-45125]
  - perf/x86/intel: Decouple BTS initialization from PEBS initialization (Anubhav Shelat) [RHEL-45125]
  - perf/x86/intel: Fix ARCH_PERFMON_NUM_COUNTER_LEAF (Anubhav Shelat) [RHEL-45125]
  - perf/x86/intel: Correct large PEBS flag check (Anubhav Shelat) [RHEL-45125]
  - perf/x86/intel: Replace x86_pmu.drain_pebs calling with static call (Anubhav Shelat) [RHEL-45125]
  - perf/x86/intel: Support auto counter reload (Anubhav Shelat) [RHEL-45125]
  - perf/x86/intel: Use better start period for frequency mode (Anubhav Shelat) [RHEL-45125]
  - perf/x86/intel: Add CPUID enumeration for the auto counter reload (Anubhav Shelat) [RHEL-45125]
  - perf/x86/intel: Track the num of events needs late setup (Anubhav Shelat) [RHEL-45125]
  - perf/x86: Add dynamic constraint (Anubhav Shelat) [RHEL-45125]
  - perf/x86/intel/uncore: Convert comma to semicolon (Michael Petlan) [RHEL-117338]
  - perf/x86/intel/uncore: Add Nova Lake support (Michael Petlan) [RHEL-117338]
  - perf/x86/intel/uncore: Add missing PMON units for Panther Lake (Michael Petlan) [RHEL-115125]
  - perf pmu: Relax uncore wildcard matching to allow numeric suffix (Michael Petlan) [RHEL-115125]
  - perf/x86/intel/uncore: Update DMR uncore constraints preliminarily (Michael Petlan) [RHEL-115125]
  - perf/x86/intel/uncore: Support uncore constraint ranges (Michael Petlan) [RHEL-115125]
  - perf/x86/intel/uncore: Support IIO free-running counters on DMR (Michael Petlan) [RHEL-115125]
  - perf/x86/intel/uncore: Add freerunning event descriptor helper macro (Michael Petlan) [RHEL-115125]
  - perf/x86/intel/uncore: Fix the scale of IIO free running counters on SPR (Michael Petlan) [RHEL-115125]
  - perf/x86/intel/uncore: Fix the scale of IIO free running counters on ICX (Michael Petlan) [RHEL-115125]
  - perf/x86/intel/uncore: Fix the scale of IIO free running counters on SNR (Michael Petlan) [RHEL-115125]
  - perf/x86/intel/uncore: Add domain global init callback (Michael Petlan) [RHEL-115125]
  - perf/x86/intel/uncore: Add CBB PMON support for Diamond Rapids (Michael Petlan) [RHEL-115125]
  - perf/x86/intel/uncore: Add IMH PMON support for Diamond Rapids (Michael Petlan) [RHEL-115125]
  - perf/x86/intel/uncore: Remove has_generic_discovery_table() (Michael Petlan) [RHEL-115125]
  - perf/x86/intel/uncore: Support per-platform discovery base devices (Michael Petlan) [RHEL-115125]
  - perf/x86/intel/uncore: Move uncore discovery init struct to header (Michael Petlan) [RHEL-115125]
  - perf/x86/intel/cstate: Add Diamond Rapids support (Michael Petlan) [RHEL-115123]
  - perf/x86/intel/cstate: Add Nova Lake support (Michael Petlan) [RHEL-120358]
  - perf/x86/intel/cstate: Add Wildcat Lake support (Michael Petlan) [RHEL-95669]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-741.el9]
changelog:
  - dm cache policy smq: check allocation under invalidate lock (Benjamin Marzinski) [RHEL-231826] {CVE-2026-53062}
  - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190190]
  - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190190] {CVE-2026-53246}
  - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234286] {CVE-2026-64564}
  - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231453] {CVE-2026-64277}
  - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230265] {CVE-2026-64276}
  - sctp: prevent peer transport count overflow (CKI Backport Bot) [RHEL-214461]
  - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212388]
  - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188202] {CVE-2026-52924}
  - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182345] {CVE-2026-53266}
  - ipv6: add NULL checks for idev in SRv6 paths (CKI Backport Bot) [RHEL-152701]


author: Charalampos Stratakis <cstratak@redhat.com> - 1:3.4.3-7
changelog:
  - Obsolete and provide the python-sphinx-locale package to fix the upgrade path
  Related: rhbz#1985219


author: Clark Williams <williams@redhat.com> - 2.5-1
changelog:
  - remove strip of realtime-entsk and generate debuginfo
  - ensure all files have valid SPDX license identifiers
  - remove Red Hat Makefile targets and specfile
  - Makefile cleanups and added .gitignore
  - drop the 'v' in the version string for the tarball
  - Makefile: add options for passing annocheck
  - Bump version to 2.5
  Resolves: RHEL-30179


author: Crystal Wood <crwood@redhat.com> - 3.8-5
changelog:
  - Prevent using cyclictest and timerlat and the same time
  - Add a --noload option
  - Switch to autosetup, picking up the updates that should have been in 3.8-4
  Resolves: RHEL-35506
  Resolves: RHEL-50323


author: Anubhav Shelat <ashelat@redhat.com> - 3.8-6
changelog:
  - Add functionality to allow user to execute cpupower tool to
  set idle state depth  while running rteval.
  - Disable latency trick by using --default-system option with
  cyclictest when setting idle state depth.
  Resolves: RHEL-37645


author: John Kacur <jkacur@redhat.com> - 3.9-3
changelog:
  - Make the default interval for timerlat in rteval 1100us
  - Make cyclictest the default measurement module for rteval
  Resolves: RHEL-78394


author: John Kacur <jkacur@redhat.com> - 3.9-5
changelog:
  - Make timerlat the default measurement module
  - Make the default interval 100us
  Resolves: RHEL-97540


author: John Kacur <jkacur@redhat.com> - 3.10-2
changelog:
  - Make thread excepthook portable and support chaining
  - Fix pyproject.toml license format deprecation warning
  - Make dmidecode requirement architecture-specific
  Resolves: RHEL-192970


author: Anubhav Shelat <ashelat@redhat.com> - 3.8-3
changelog:
  - Allow rteval to search /usr/bin/ for sysreport
  - Convert base64 data to text before wrapping.
  - Add sysreport to gating tests and check the exit status.
  Resolves: RHEL-44437


author: John Kacur <jkacur@redhat.com> - 3.8-4
changelog:
  - Add timerlat tracing
  - Add Fix -aNone being passed to cyclictest
  - Add rtla as a requires for timerlat
  Resolves: RHEL-35461


author: John Kacur <jkacur@redhat.com> - 1.4-12
changelog:
  - Since this package only delivers kernel, moving the spec requires
    for building it to the rteval packages


author: John Kacur <jkacur@redhat.com> - 1.5-1
changelog:
  - Fix the gating test to match the kernel version delivered by rteval-loads
  - Change the version number to sync with rteval-loads in rhel-8
  Resolves: rhbz#2042214


author: John Kacur <jkacur@redhat.com> - 1.6-3
changelog:
  - Upgrade the gating tests to match the kernel version in rteval-loads
  Resolves: rhbz#2166356
  jiraProject == RHELPLAN-147319


author: John Kacur <jkacur@redhat.com> - 1.6-4
changelog:
  - Upgrade the the kernel to linux-6.6.1
  - Make the gating tests match the correct kernel version
  Resolves: RHEL-14482


author: John Kacur <jkacur@redhat.com> - 6.17.7-1
changelog:
  - Changed the kernel version to 6.17.7
  - changed the rteval-loads number scheme to reflect the kernel version
  Resolves: RHEL-86701


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: RHEL-50568
    - spec: create /etc/tuned/profiles directory
    - hotplug: wait for device initialization
    - sap-netweaver: increased vm.max_map_count
      resolves: RHEL-31757
    - daemon: buffer sighup signal
      resolves: RHEL-31180
    - added an option to configure profile directories
      resolves: RHEL-26157
    - api: added commands to dynamically create/destroy instances
    - functions: added 'intel_recommended_pstate'
    - functions: added 'log' which helps with debugging
    - functions: added 'package2cpus' and 'packages2uncores' matchers
    - functions: added 'lscpu' to list CPU details
    - plugins: added plugin_irq
    - plugin_video: added support for amdgpu `panel_power_savings` attribute
    - plugin_cpu: check that writes are necessary if they may cause redundant IPIs
      resolves: RHEL-25613
    - plugin_uncore: allow to configure frequency limits using percent
    - amd-pstate: added support for controlling core performance boost
    - plugin_scheduler: adjusted error logging in _set_affinity
      resolves: RHEL-46560
    - plugin_audio: enabled controller reset to fix suspend with NVIDIA
    - plugin_irq: fixed expansion of variables
    - plugin_irqbalance: switched to IRQBALANCE_BANNED_CPULIST


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-0.2.rc1
changelog:
  - fixed functions packaging and added explicit conflict with power-profiles-daemon
    related: RHEL-50568


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-50568
    - clear plugin repository when stopping tuning
    - man: add description of the balanced-battery profile


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-2
changelog:
  - Fixed privileged execution of arbitrary scripts by active local user,
    (CVE-2024-52336)
    Resolves: RHEL-66638
  - Added sanity checks for API methods parameters, (CVE-2024-52337)
    Resolves: RHEL-66615


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.25.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: RHEL-70457
    - tuned-ppd: removed the use of StrEnum
    - tuned-ppd: fixed traceback
    - tuned-ppd: multiple fixes and updates
    - docs: plugins docs are now automatically generated from the docstrings
    - plugin_cpu: fixed no_turbo boolean option parsing
      resolves: RHEL-51760
    - plugin_cpu: allowed raw energy_performance_preference values
    - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters
      resolves: RHEL-58820
    - plugin_bootloader: added variables to BLS entries only if grub is used
    - plugin_scheduler: do not assume that perf events have type attribute
    - plugin_scheduler: updated sched knobs for kernels 6.6+
    - plugin_scheduler: log process info when its affinity cannot be changed
    - plugin_scheduler: postpone cgroup blacklist check, double-check after fail
      resolves: RHEL-72981
    - plugin_scheduler: made perf support optional
    - plugin_net: added support for hotplug and rename
      resolves: RHEL-60906
    - makefile: added support for installation to custom $BINDIR/$SBINDIR
    - functions: dropped cpuspeed support


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.25.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-70457
    - sap-hana: Set transparent_hugepages to madvise
    - plugin_bootloader: export Grub variables to make them available in submenus
    - utils.commands: fixed CPU online detection when not present
    - plugin_net: handled cqe-mode-rx ethtool option
    - profiles: correct CPU governor settings


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.25.1-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-70457
    - plugins: added missing instance parameters
    - disk: added missing remove parameter
    - plugin_scheduler: added switch to disable processing of kthreads
    - Makefile: added support for installation to custom LIBEXECDIR
    - functions: create a new parser object for each string expansion
      resolves: RHEL-75773


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.26.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: RHEL-94808
    - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor
    - tuned-ppd: enabled sysfs_acpi_monitor by default
    - tuned-ppd: fixed inotify watch for performance degradation
    - tuned-ppd: pinned virtual files in memory for inotify
    - fixed instance priority inheritance
    - hotplug: added fixes for device remove race condition
    - tuned-main.conf: added startup_udev_settle_wait option
    - functions: silenced errors if module kvm_intel does not exist
      resolves: RHEL-79943
    - functions: make calc_isolated_cores return CPU ranges
      resolves: RHEL-75751
    - scsi: used 'med_power_with_dipm' for SATA ALPM
    - scsi: do not set ALPM on external SATA ports
    - network_latency: Set non-zero rcutree.nohz_full_patience_delay
    - realtime: Disable appropriate P-State drivers
      resolves: RHEL-85637
    - plugin_disk: added support for MMC (MultiMediaCard) devices
    - udev: fix possible traceback in device matcher
    - udev-settle: obey udev buffer size and handle possible tracebacks
    - daemon: re-raise daemon init exception in no-daemon mode
      resolves: RHEL-71304
    - vm: deprecate dirty_ratio in favour of dirty_bytes with percents
      resolves: RHEL-101578
    - gui: fix the profile deleter script


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.27.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: RHEL-123607
    - cpu-partitioning: autodetect dracut hook directory, systemd workaround
    - openshift: optimize TCP settings for high throughput and low latency
    - profiles: Set boost=1 in *-performance profiles
    - sap-hana: force latency to 70 us, not to C-states
    - man: fixed instance_acquire_devices example in tuned-adm man
    - spec: use correct python interpreter for documentation installation
    - sysctl: add reapply_sysctl_exclude option
    - ppd: ask tuned recommend for base profile


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.28.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: RHEL-210923
    - scheduler: check for EPERM when setting IRQ affinity
    - bootloader: set correct permission for tempdir
      resolves: RHEL-121198
    - commands: better error msgs when creating directory and hardened dir mode
    - docs: build reference guide
    - systemd: used drop-ins for configuration
    - systemd: do not backup the drop-in configuration
    - net: add more coalescing options, filter out unsupported ones
    - cpu: do not log error if boost isn't supported
    - bootloader: add bootc loader-entries set-options-for-source support
    - cpu: fixed TypeError when load_threshold is set in a profil
    - openshift: include network-throughput profile
    - drop support for vm.laptop_mode which is deprecated in kernel 7.0
    - net: fixed ring parser to work with rx-mini and rx-jumbo
      resolves: RHEL-168025
    - lscpu_check: do not traceback on invalid regex
      resolves: RHEL-132575
    - network-latency: increase AVC cache to 8192
    - functions: use iw for Wi-Fi power saving


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.28.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-210923
    - spec: require rpm-ostree on image mode (bootc) systems


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.22.1-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-17121
    - renamed intel_uncore plugin to uncore
    - network-throughput: increased net.ipv4.tcp_rmem default value
      resolves: RHEL-25847


